CVE-2007-5809
Severity Score
6.1
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Hitachi Web Server 01-00 hasta 03-10, tal y como se usa en determinados productos Cosminexus, permite a atacantes remotos inyectar scripts web o HTML de su elección mediante peticiones HTTP no especificadas que disparan la creación de una página estado-de-servidor.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-11-05 CVE Reserved
- 2007-11-05 CVE Published
- 2024-08-07 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/42027 | Vdb Entry | |
| http://www.hitachi-support.com/security_e/vuls_e/HS07-035_e/index-e.html | X_refsource_confirm | |
| http://www.securityfocus.com/bid/26271 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2007/3666 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/27421 | 2011-03-08 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Hitachi Search vendor "Hitachi" | Cosminexus Application Server Enterprise Search vendor "Hitachi" for product "Cosminexus Application Server Enterprise" | <= 06_51_j Search vendor "Hitachi" for product "Cosminexus Application Server Enterprise" and version " <= 06_51_j" | - |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Cosminexus Application Server Standard Search vendor "Hitachi" for product "Cosminexus Application Server Standard" | <= 06_51_j Search vendor "Hitachi" for product "Cosminexus Application Server Standard" and version " <= 06_51_j" | - |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Cosminexus Developer Light Version 6 Search vendor "Hitachi" for product "Cosminexus Developer Light Version 6" | <= 06_51_j Search vendor "Hitachi" for product "Cosminexus Developer Light Version 6" and version " <= 06_51_j" | - |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Cosminexus Developer Professional Version 6 Search vendor "Hitachi" for product "Cosminexus Developer Professional Version 6" | <= 06_51_j Search vendor "Hitachi" for product "Cosminexus Developer Professional Version 6" and version " <= 06_51_j" | - |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Cosminexus Developer Standard Version 6 Search vendor "Hitachi" for product "Cosminexus Developer Standard Version 6" | <= 06_51_j Search vendor "Hitachi" for product "Cosminexus Developer Standard Version 6" and version " <= 06_51_j" | - |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Cosminexus Server Search vendor "Hitachi" for product "Cosminexus Server" | <= 04_01 Search vendor "Hitachi" for product "Cosminexus Server" and version " <= 04_01" | - |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Ucosminexus Application Server Enterprise Search vendor "Hitachi" for product "Ucosminexus Application Server Enterprise" | <= 07_50_01 Search vendor "Hitachi" for product "Ucosminexus Application Server Enterprise" and version " <= 07_50_01" | - |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Ucosminexus Application Server Standard Search vendor "Hitachi" for product "Ucosminexus Application Server Standard" | <= 07_50_01 Search vendor "Hitachi" for product "Ucosminexus Application Server Standard" and version " <= 07_50_01" | - |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Ucosminexus Developer Light Search vendor "Hitachi" for product "Ucosminexus Developer Light" | <= 06_71_d Search vendor "Hitachi" for product "Ucosminexus Developer Light" and version " <= 06_71_d" | - |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Ucosminexus Developer Professional Search vendor "Hitachi" for product "Ucosminexus Developer Professional" | <= 07_50_01 Search vendor "Hitachi" for product "Ucosminexus Developer Professional" and version " <= 07_50_01" | - |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Ucosminexus Developer Standard Search vendor "Hitachi" for product "Ucosminexus Developer Standard" | <= 07_50_01 Search vendor "Hitachi" for product "Ucosminexus Developer Standard" and version " <= 07_50_01" | - |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Ucosminexus Service Architect Search vendor "Hitachi" for product "Ucosminexus Service Architect" | <= 07_50_01 Search vendor "Hitachi" for product "Ucosminexus Service Architect" and version " <= 07_50_01" | - |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Ucosminexus Service Platform Search vendor "Hitachi" for product "Ucosminexus Service Platform" | <= 07_50_01 Search vendor "Hitachi" for product "Ucosminexus Service Platform" and version " <= 07_50_01" | - |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 01_00 Search vendor "Hitachi" for product "Web Server" and version "01_00" | hpux |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 01_00 Search vendor "Hitachi" for product "Web Server" and version "01_00" | solaris |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 01_01 Search vendor "Hitachi" for product "Web Server" and version "01_01" | aix |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 01_01 Search vendor "Hitachi" for product "Web Server" and version "01_01" | linux |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 01_01 Search vendor "Hitachi" for product "Web Server" and version "01_01" | turbolinux |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 01_01_d Search vendor "Hitachi" for product "Web Server" and version "01_01_d" | linux |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 01_02_d Search vendor "Hitachi" for product "Web Server" and version "01_02_d" | hpux |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 01_02_d Search vendor "Hitachi" for product "Web Server" and version "01_02_d" | solaris |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 01_02_e Search vendor "Hitachi" for product "Web Server" and version "01_02_e" | aix |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 02_00 Search vendor "Hitachi" for product "Web Server" and version "02_00" | aix |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 02_00 Search vendor "Hitachi" for product "Web Server" and version "02_00" | hpux |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 02_00 Search vendor "Hitachi" for product "Web Server" and version "02_00" | linux |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 02_00 Search vendor "Hitachi" for product "Web Server" and version "02_00" | solaris |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 02_00 Search vendor "Hitachi" for product "Web Server" and version "02_00" | turbolinux |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 02_00 Search vendor "Hitachi" for product "Web Server" and version "02_00" | windows |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 02_00_a Search vendor "Hitachi" for product "Web Server" and version "02_00_a" | linux |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 02_02 Search vendor "Hitachi" for product "Web Server" and version "02_02" | hpux |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 02_02 Search vendor "Hitachi" for product "Web Server" and version "02_02" | hpux\(ipf\) |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 02_02 Search vendor "Hitachi" for product "Web Server" and version "02_02" | linux |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 02_04_b Search vendor "Hitachi" for product "Web Server" and version "02_04_b" | aix |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 02_04_b Search vendor "Hitachi" for product "Web Server" and version "02_04_b" | hpux |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 02_04_b Search vendor "Hitachi" for product "Web Server" and version "02_04_b" | hpux\(ipf\) |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 02_04_b Search vendor "Hitachi" for product "Web Server" and version "02_04_b" | solaris |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 02_04_b Search vendor "Hitachi" for product "Web Server" and version "02_04_b" | windows |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 02_06_a Search vendor "Hitachi" for product "Web Server" and version "02_06_a" | linux |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 03_00 Search vendor "Hitachi" for product "Web Server" and version "03_00" | aix |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 03_00 Search vendor "Hitachi" for product "Web Server" and version "03_00" | hpux\(ipf\) |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 03_00 Search vendor "Hitachi" for product "Web Server" and version "03_00" | linux |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 03_00 Search vendor "Hitachi" for product "Web Server" and version "03_00" | windows |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 03_00_01 Search vendor "Hitachi" for product "Web Server" and version "03_00_01" | solaris |
Affected
| ||||||
| Hitachi Search vendor "Hitachi" | Web Server Search vendor "Hitachi" for product "Web Server" | 03_00_01 Search vendor "Hitachi" for product "Web Server" and version "03_00_01" | windows |
Affected
| ||||||