CVE-2007-1854

Severity Score

9.8

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Unspecified vulnerability in Hitachi Cosminexus Component Container 07-00 through 07-00-10, and 07-10 through 07-10-03, as used in uCosminexus Application Server Enterprise and Standard; uCosminexus Service Platform; uCosminexus Developer Standard and Professional; uCosminexus Service Architect; Electronic Form Workflow Standard Set, Professional Library Set, and Developer Client Set; and uCosminexus ERP Integrator, does not properly manage session information, which has an unspecified impact related to "unintended other requests."

Vulnerabilidad sin especificar en el Hitachi Cosminexus Component Container 07-00 hasta la 07-00-10 y la 07-10 hasta la 07-10-03, como la utilizada en el uCosminexus Application Server Enterprise y Standard; uCosminexus Service Platform; uCosminexus Developer Standard y Professional; uCosminexus Service Architect; Electronic Form Workflow Standard Set, Professional Library Set y Developer Client Set y uCosminexus ERP Integrator, no maneja correctamente la información de la sesión lo que tiene un impacto sin especificar sobre "otras peticiones no intencionadas".

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-04-03 CVE Reserved
2007-04-03 CVE Published
2024-08-07 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (6)

URL	Tag	Source
http://osvdb.org/34768	Vdb Entry
http://www.hitachi-support.com/security_e/vuls_e/HS07-006_e/index-e.html	X_refsource_confirm
http://www.securityfocus.com/bid/23213	Vdb Entry
http://www.vupen.com/english/advisories/2007/1170	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/33318	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/24683	2017-07-29

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Hitachi Search vendor "Hitachi"		Cosminexus Component Container Search vendor "Hitachi" for product "Cosminexus Component Container"				07_00_11 Search vendor "Hitachi" for product "Cosminexus Component Container" and version "07_00_11"		aix		Affected
Hitachi Search vendor "Hitachi"		Cosminexus Component Container Search vendor "Hitachi" for product "Cosminexus Component Container"				07_00_11 Search vendor "Hitachi" for product "Cosminexus Component Container" and version "07_00_11"		hp-ux_ipf		Affected
Hitachi Search vendor "Hitachi"		Cosminexus Component Container Search vendor "Hitachi" for product "Cosminexus Component Container"				07_00_11 Search vendor "Hitachi" for product "Cosminexus Component Container" and version "07_00_11"		linux		Affected
Hitachi Search vendor "Hitachi"		Cosminexus Component Container Search vendor "Hitachi" for product "Cosminexus Component Container"				07_00_11 Search vendor "Hitachi" for product "Cosminexus Component Container" and version "07_00_11"		windows		Affected
Hitachi Search vendor "Hitachi"		Cosminexus Component Container Search vendor "Hitachi" for product "Cosminexus Component Container"				07_10_04 Search vendor "Hitachi" for product "Cosminexus Component Container" and version "07_10_04"		aix		Affected
Hitachi Search vendor "Hitachi"		Cosminexus Component Container Search vendor "Hitachi" for product "Cosminexus Component Container"				07_10_04 Search vendor "Hitachi" for product "Cosminexus Component Container" and version "07_10_04"		hp-ux		Affected
Hitachi Search vendor "Hitachi"		Cosminexus Component Container Search vendor "Hitachi" for product "Cosminexus Component Container"				07_10_04 Search vendor "Hitachi" for product "Cosminexus Component Container" and version "07_10_04"		hp-ux_ipf		Affected
Hitachi Search vendor "Hitachi"		Cosminexus Component Container Search vendor "Hitachi" for product "Cosminexus Component Container"				07_10_04 Search vendor "Hitachi" for product "Cosminexus Component Container" and version "07_10_04"		linux		Affected
Hitachi Search vendor "Hitachi"		Cosminexus Component Container Search vendor "Hitachi" for product "Cosminexus Component Container"				07_10_04 Search vendor "Hitachi" for product "Cosminexus Component Container" and version "07_10_04"		linux_ipf		Affected
Hitachi Search vendor "Hitachi"		Cosminexus Component Container Search vendor "Hitachi" for product "Cosminexus Component Container"				07_10_04 Search vendor "Hitachi" for product "Cosminexus Component Container" and version "07_10_04"		windows		Affected
Hitachi Search vendor "Hitachi"		Electronic Form Workflow Search vendor "Hitachi" for product "Electronic Form Workflow"				*		developer_client_set		Affected
Hitachi Search vendor "Hitachi"		Electronic Form Workflow Search vendor "Hitachi" for product "Electronic Form Workflow"				*		professional_library_set		Affected
Hitachi Search vendor "Hitachi"		Electronic Form Workflow Search vendor "Hitachi" for product "Electronic Form Workflow"				*		standard_set		Affected
Hitachi Search vendor "Hitachi"		Ucosminexus Application Server Search vendor "Hitachi" for product "Ucosminexus Application Server"				*		enterprise		Affected
Hitachi Search vendor "Hitachi"		Ucosminexus Application Server Search vendor "Hitachi" for product "Ucosminexus Application Server"				*		standard		Affected
Hitachi Search vendor "Hitachi"		Ucosminexus Developer Search vendor "Hitachi" for product "Ucosminexus Developer"				*		professional		Affected
Hitachi Search vendor "Hitachi"		Ucosminexus Developer Search vendor "Hitachi" for product "Ucosminexus Developer"				*		standard		Affected
Hitachi Search vendor "Hitachi"		Ucosminexus Erp Integrator Search vendor "Hitachi" for product "Ucosminexus Erp Integrator"				*		-		Affected
Hitachi Search vendor "Hitachi"		Ucosminexus Service Architect Search vendor "Hitachi" for product "Ucosminexus Service Architect"				*		-		Affected
Hitachi Search vendor "Hitachi"		Ucosminexus Service Platform Search vendor "Hitachi" for product "Ucosminexus Service Platform"				*		-		Affected