CVE-2007-0514

No fix known EPSS 1%

Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.

Published 2007-01-26 · CVE record · OSV

Products: hitachi cosminexus_application_server, hitachi cosminexus_application_server_version_5, hitachi cosminexus_developer_light_version_6, hitachi cosminexus_developer_professional_version_6, hitachi cosminexus_developer_standard_version_6, hitachi cosminexus_developer_version_5, hitachi cosminexus_server_-_enterprise_edition, hitachi cosminexus_server_-_standard_edition, hitachi cosminexus_server_-_standard_edition_version_4, hitachi cosminexus_server_-_web_edition, hitachi cosminexus_server_-_web_edition_version_4, hitachi_web_server, hitachi ucosminexus_application_server_enterprise, hitachi ucosminexus_application_server_smart_edition, hitachi ucosminexus_application_server_standard, hitachi ucosminexus_developer_light, hitachi ucosminexus_developer_standard, hitachi ucosminexus_service_architect, hitachi ucosminexus_service_platform