CVE-2006-1574: XSS

Published Apr 1, 2006

Updated

Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web, World Wide Web Desktop, World Wide Web for Scheduler, and Desktop for Scheduler, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

Affected Software

8 affected components

Hitachi Groupmax World Wide Web=2

Hitachi Groupmax World Wide Web=3

Hitachi Groupmax World Wide Web Desktop

Hitachi Groupmax World Wide Web Desktop=5

Hitachi Groupmax World Wide Web Desktop=6

Hitachi Groupmax World Wide Web Desktop Scheduler=5

Hitachi Groupmax World Wide Web Scheduler=2

Hitachi Groupmax World Wide Web Scheduler=3

Remediation

Patch Available

http://www.hitachi-support.com/security_e/vuls_e/HS06-005_e/index-e.html

Event History

Apr 1, 2006

CVE Published

12:04 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-1574?

CVE-2006-1574 is classified as a medium severity cross-site scripting (XSS) vulnerability.

How do I fix CVE-2006-1574?

To fix CVE-2006-1574, ensure that you apply the latest security patches provided by Hitachi for affected Groupmax software.

What are the affected versions in CVE-2006-1574?

CVE-2006-1574 affects Hitachi Groupmax World Wide Web Desktop versions 5, 6 and all versions of Groupmax World Wide Web, World Wide Web Scheduler versions 2, 3.

What type of attack does CVE-2006-1574 allow?

CVE-2006-1574 allows remote attackers to inject arbitrary web script or HTML into vulnerable applications.

Which Hitachi products are impacted by CVE-2006-1574?

CVE-2006-1574 impacts Hitachi Groupmax World Wide Web and its associated desktop and scheduler applications.