Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

hitachi ucosminexus application server vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2007-4758
Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote malicious users to cause a denial of service or execute arbitrary code via unspecified vectors.
Hitachi Ucosminexus Application Server Enterprise 07 00 01Hitachi Ucosminexus Application Server Enterprise 07 10Hitachi Ucosminexus Application Server Standard 07 00Hitachi Ucosminexus Application Server Standard 07 00 03Hitachi Ucosminexus Application Server Standard 07 10Hitachi Ucosminexus Application Server Standard 7 10 01Hitachi Ucosminexus Service Platform 07 00 03Hitachi Ucosminexus Service Platform 07 10Hitachi Ucosminexus Application Server Enterprise 07 00Hitachi Ucosminexus Application Server Enterprise 7 20 01Hitachi Ucosminexus Application Server Standard 07 00 01Hitachi Ucosminexus Application Server Standard 07 00 02Hitachi Ucosminexus Service Platform 07 00 01Hitachi Ucosminexus Service Platform 07 00 02Hitachi Ucosminexus Service Platform 07 20Hitachi Ucosminexus Service Platform 7 20 01Hitachi Ucosminexus Application Server Enterprise 07 00 02Hitachi Ucosminexus Application Server Enterprise 07 00 03Hitachi Ucosminexus Application Server Enterprise 07 10 01Hitachi Ucosminexus Application Server Standard 7 20Hitachi Ucosminexus Application Server Standard 7 20 01Hitachi Ucosminexus Application Server Enterprise 7 20
5
CVSSv2
CVE-2007-4759
Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote malicious users to cause a denial of service via unspecified vectors.
Hitachi Ucosminexus Application Server Enterprise 07 00Hitachi Ucosminexus Application Server Enterprise 07 00 01Hitachi Ucosminexus Application Server Enterprise 07 00 02Hitachi Ucosminexus Application Server Enterprise 07 10 01Hitachi Ucosminexus Application Server Standard 07 00Hitachi Ucosminexus Application Server Standard 07 10Hitachi Ucosminexus Application Server Standard 7 20Hitachi Ucosminexus Application Server Standard 7 20 01Hitachi Ucosminexus Service Platform 07 10Hitachi Ucosminexus Application Server Enterprise 07 10Hitachi Ucosminexus Application Server Standard 07 00 02Hitachi Ucosminexus Application Server Standard 07 00 03Hitachi Ucosminexus Application Server Standard 7 10 01Hitachi Ucosminexus Service Platform 07 00 02Hitachi Ucosminexus Service Platform 07 00 03Hitachi Ucosminexus Service Platform 7 20 01Hitachi Ucosminexus Application Server Enterprise 07 00 03Hitachi Ucosminexus Application Server Enterprise 7 20Hitachi Ucosminexus Application Server Standard 07 00 01Hitachi Ucosminexus Service Platform 07 00Hitachi Ucosminexus Service Platform 07 10 01Hitachi Ucosminexus Application Server Enterprise 7 20 01
4.3
CVSSv2
CVE-2007-4760
The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting (XSS) vulnerabilities, which allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this...
Hitachi Ucosminexus Application Server Enterprise 07 00 01Hitachi Ucosminexus Application Server Enterprise 07 00 02Hitachi Ucosminexus Application Server Enterprise 07 10Hitachi Ucosminexus Application Server Enterprise 07 10 01Hitachi Ucosminexus Application Server Standard 07 00Hitachi Ucosminexus Application Server Standard 07 10Hitachi Ucosminexus Application Server Standard 7 10 01Hitachi Ucosminexus Application Server Standard 7 20Hitachi Ucosminexus Developer Standard 07 10 01Hitachi Ucosminexus Developer Standard 07 20Hitachi Ucosminexus Developer Standard 07 20 01Hitachi Ucosminexus Service Platform 07 00 03Hitachi Ucosminexus Service Platform 07 10Hitachi Ucosminexus Application Server Enterprise 07 00Hitachi Ucosminexus Application Server Enterprise 7 20Hitachi Ucosminexus Application Server Enterprise 7 20 01Hitachi Ucosminexus Application Server Standard 07 00 01Hitachi Ucosminexus Developer Standard 07 00 01Hitachi Ucosminexus Developer Standard 07 00 02Hitachi Ucosminexus Service Platform 07 00Hitachi Ucosminexus Service Platform 07 00 01Hitachi Ucosminexus Service Platform 07 10 01
4.4
CVSSv2
CVE-2007-4563
Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.
Hitachi Cosminexus Application Server Enterprise 06 50Hitachi Cosminexus Application Server Enterprise 06 50 FHitachi Cosminexus Application Server Enterprise 06 51Hitachi Cosminexus Application Server Standard 06 50 BHitachi Cosminexus Application Server Standard 06 50 CHitachi Cosminexus Application Server Standard 06 51 B 1Hitachi Cosminexus Application Server Standard 06 51 CHitachi Ucosminexus Application Server Enterprise 06 70 AHitachi Ucosminexus Application Server Enterprise 06 71Hitachi Ucosminexus Application Server Enterprise 06 71 BHitachi Ucosminexus Application Server Enterprise 07-00-01Hitachi Ucosminexus Application Server Enterprise 07 00Hitachi Ucosminexus Application Server Enterprise 07 10Hitachi Ucosminexus Application Server Standard 06 70 BHitachi Ucosminexus Application Server Standard 06 71 BHitachi Ucosminexus Application Server Standard 06 72 1Hitachi Ucosminexus Application Server Standard 07 00Hitachi Ucosminexus Application Server Standard 07 00 1Hitachi Ucosminexus Service Platform 07 10Hitachi Cosminexus Application Server Enterprise 06 50 C 1Hitachi Cosminexus Application Server Enterprise 06 50 E 1Hitachi Cosminexus Application Server Standard 06 50
4.6
CVSSv2
CVE-2007-4564
Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges.
Hitachi Cosminexus Application Server Enterprise 06 50 CHitachi Cosminexus Application Server Enterprise 06 50 C 1Hitachi Cosminexus Application Server Standard 06 50Hitachi Cosminexus Application Server Standard 06 50 E 1Hitachi Cosminexus Application Server Standard 06 50 FHitachi Electronic Form Workflow -professional Library Set 07 00Hitachi Electronic Form Workflow -professional Library Set 07 00 BHitachi Ucosminexus Application Server Enterprise 06 70 BHitachi Ucosminexus Application Server Enterprise 06 70 B 1Hitachi Ucosminexus Application Server Enterprise 06 72 1Hitachi Ucosminexus Application Server Enterprise 06 72 BHitachi Ucosminexus Application Server Enterprise 07 00Hitachi Ucosminexus Application Server Enterprise 07 00 12Hitachi Ucosminexus Application Server Enterprise 07 10 1Hitachi Ucosminexus Application Server Standard 06 70Hitachi Ucosminexus Application Server Standard 06 70 B 1Hitachi Ucosminexus Application Server Standard 06 70 CHitachi Ucosminexus Application Server Standard 06 72 DHitachi Ucosminexus Application Server Standard 06 72 GHitachi Ucosminexus Application Server Standard 07 00Hitachi Ucosminexus Application Server Standard 07 10Hitachi Cosminexus Application Server Enterprise 06 50
5
CVSSv2
CVE-2007-5281
The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products prior to 07-50-01, when using JSSE for SSL/TLS support, allows remote malicious users to cause a denial of service via certain SSL/TLS handsh...
Hitachi Ucosminexus Operator 07 50Hitachi Ucosminexus Service Architect 7 50Hitachi Ucosminexus Application Server Standard 7 50Hitachi Ucosminexus Client 07 50Hitachi Ucosminexus Developer Professional 07 50Hitachi Ucosminexus Developer Standard 07 50Hitachi Ucosminexus Application Server Enterprise 07 50Hitachi Ucosminexus Service Platform 7 50
6.8
CVSSv2
CVE-2007-0514
Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products prior to 20070124 allow remote malicious users to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.
Hitachi Cosminexus Application ServerHitachi Cosminexus Server - Enterprise EditionHitachi Cosminexus Server - Standard EditionHitachi Ucosminexus Application Server StandardHitachi Ucosminexus Developer LightHitachi Cosminexus Developer Standard Version 6Hitachi Cosminexus Developer Version 5Hitachi Ucosminexus Application Server EnterpriseHitachi Ucosminexus Application Server Smart EditionHitachi Cosminexus Application Server 6Hitachi Cosminexus Application Server Version 5Hitachi Cosminexus Server - Standard Edition Version 4Hitachi Cosminexus Server - Web EditionHitachi Ucosminexus Developer StandardHitachi Ucosminexus Service ArchitectHitachi Ucosminexus Service PlatformHitachi Cosminexus Developer Light Version 6Hitachi Cosminexus Developer Professional Version 6Hitachi Cosminexus Server - Web Edition Version 4Hitachi Hitachi Web Server
4.3
CVSSv2
CVE-2007-5809
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote malicious users to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
Hitachi Web Server 01 01Hitachi Web Server 02 00Hitachi Web Server 02 02Hitachi Web Server 02 04 BHitachi Web Server 03 00Hitachi Cosminexus Developer Standard Version 6Hitachi Cosminexus ServerHitachi Ucosminexus Service PlatformHitachi Web Server 01 02 DHitachi Web Server 02 00 AHitachi Web Server 02 06 AHitachi Cosminexus Application Server EnterpriseHitachi Cosminexus Application Server StandardHitachi Ucosminexus Developer LightHitachi Ucosminexus Developer ProfessionalHitachi Web Server 01 01 DHitachi Web Server 03 00 01Hitachi Ucosminexus Application Server EnterpriseHitachi Ucosminexus Application Server StandardHitachi Web Server 01 00Hitachi Web Server 01 02 EHitachi Cosminexus Developer Light Version 6
5
CVSSv2
CVE-2007-5810
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote malicious users to spoof authentication via a client certificate with a forged signature.
Hitachi Web Server 01 00Hitachi Web Server 01 02 DHitachi Web Server 01 02 EHitachi Web Server 02 00 AHitachi Web Server 02 02Hitachi Web Server 02 06 AHitachi Web Server 03 00Hitachi Web Server 01 01Hitachi Web Server 02 00Hitachi Web Server 02 04 BHitachi Web Server 03 00 01Hitachi Cosminexus ServerHitachi Ucosminexus Application Server EnterpriseHitachi Cosminexus Application Server StandardHitachi Cosminexus Developer Light Version 6Hitachi Ucosminexus Developer ProfessionalHitachi Ucosminexus Developer StandardHitachi Cosminexus Developer Professional Version 6Hitachi Cosminexus Developer Standard Version 6Hitachi Ucosminexus Service ArchitectHitachi Ucosminexus Service PlatformHitachi Web Server 01 01 D
4.9
CVSSv2
CVE-2007-4124
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 prior to 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensit...
Hitachi Cosminexus Collaboration PortalHitachi Cosminexus Developer 6Hitachi Electronic Form WorkflowHitachi Groupmax Collaboration PortalHitachi Ucosminexus Opentp1 Web Front-end SetHitachi Ucosminexus Service ArchitectHitachi Ucosminexus Application ServerHitachi Ucosminexus Collaboration PortalHitachi Ucosminexus Service PlatformHitachi Cosminexus Application Server 6Hitachi Ucosminexus DeveloperHitachi Ucosminexus Erp IntegratorHitachi Cosminexus Erp IntegratorHitachi Cosminexus Opentp1 Web Front-end Set
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook