Patchwire CVEs, their patch status, and feeds to follow them

CVE-2007-5809

No fix known EPSS 1%

Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.

Published 2007-11-05 · CVE record · OSV

Products: hitachi cosminexus_application_server_enterprise, hitachi cosminexus_application_server_standard, hitachi cosminexus_developer_light_version_6, hitachi cosminexus_developer_professional_version_6, hitachi cosminexus_developer_standard_version_6, hitachi cosminexus_server, hitachi ucosminexus_application_server_enterprise, hitachi ucosminexus_application_server_standard, hitachi ucosminexus_developer_light, hitachi ucosminexus_developer_professional, hitachi ucosminexus_developer_standard, hitachi ucosminexus_service_architect, hitachi ucosminexus_service_platform, hitachi web_server