CVSS: 6.5EPSS: 0%CPEs: 24EXPL: 0CVE-2018-21033
https://notcve.org/view.php?id=CVE-2018-21033
A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets (CSS) token sequence. Hitachi Command Suite includes Hitachi Device Manager, Hitachi Tiered Storage Manager, Hitachi Replication Manager, Hitachi Tuning Manager, Hitachi Global Link Manager and Hitachi Compute Systems Manager. Una vulnerabilidad en Hitachi Command Suite versiones anteriores a 8.6.2-00, Hitachi Automation Director versiones anteriores a 8.6.2-00 y Hitachi Infrastructure Analytics Advisor versiones anteriores a 4.2.0-00, permiten a usuarios autenticados remotos cargar secuencia de tokens de tipo Cascading Style Sheets (CSS) arbitrarias. Hitachi Command Suite incluye Hitachi Device Manager, Hitachi Tiered Storage Manager, Hitachi Replication Manager, Hitachi Tuning Manager, Hitachi Global Link Manager y Hitachi Compute Systems Manager. • http://www.hitachi.co.jp/Prod/comp/soft1/global/security https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-128 • CWE-20: Improper Input Validation •
CVSS: 4.3EPSS: 0%CPEs: 12EXPL: 0CVE-2015-1565
https://notcve.org/view.php?id=CVE-2015-1565
Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en la ayuda online en Hitachi Device Manager, Tiered Storage Manager, Replication Manager, y Global Link Manager anterior a 8.1.2-00, y Compute Systems Manager anterior a 7.6.1-08 y 8.x anterior a 8.1.2-00, utilizado en Hitachi Command Suite, permite a atacantes remotos inyectar secuencias de comandos web arbitrarios o HTML a través de vectores no especificados. • http://secunia.com/advisories/62579 http://secunia.com/advisories/62584 http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS15-001/index.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 21EXPL: 0CVE-2007-3623
https://notcve.org/view.php?id=CVE-2007-3623
Cross-site scripting (XSS) vulnerability in the Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replication Monitor, and GlobalLink Availability Manager before 20070528 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replication Monitor, y GlobalLink Availability Manager anterior a 20070528 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de cabeceras HTTP esperadas. • http://osvdb.org/37848 http://osvdb.org/37849 http://secunia.com/advisories/25973 http://www.hitachi-support.com/security_e/vuls_e/HS07-017_e/index-e.html http://www.securityfocus.com/bid/24797 http://www.vupen.com/english/advisories/2007/2457 https://exchange.xforce.ibmcloud.com/vulnerabilities/35286 •
CVSS: 5.0EPSS: 0%CPEs: 44EXPL: 0CVE-2007-1853
https://notcve.org/view.php?id=CVE-2007-1853
Unspecified vulnerability in Hitachi JP1/HiCommand DeviceManager, Global Link Availability Manager, Replication Monitor, Tiered Storage Manager, and Tuning Manager allows local users to obtain authentication information via unspecified vectors. Vulnerabilidad sin especificar en el Hitachi JP1/HiCommand DeviceManager, Global Link Availability Manager, Replication Monitor, Tiered Storage Manager y Tuning Manager permite a usuarios locales obtener la información de la autenticación mediante vectores sin especificar. • http://osvdb.org/34590 http://secunia.com/advisories/24684 http://www.hitachi-support.com/security_e/vuls_e/HS07-007_e/index-e.html http://www.securityfocus.com/bid/23210 http://www.vupen.com/english/advisories/2007/1169 https://exchange.xforce.ibmcloud.com/vulnerabilities/33328 •