CVE-2007-0514: XSS

Published Jan 26, 2007

Updated

Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.

Affected Software

20 affected components

Hitachi Hitachi Web Server

Hitachi Ucosminexus Developer Standard

Hitachi Cosminexus Developer Standard Version 6

Hitachi Cosminexus Server - Web Edition

Hitachi uCosminexus Service Platform

Hitachi Cosminexus Server - Web Edition Version 4

Hitachi Cosminexus Application Server=6

Hitachi Cosminexus Developer Light Version 6

Hitachi Cosminexus Server - Standard Edition

Hitachi Cosminexus Application Server

Hitachi Ucosminexus Application Server Standard

Hitachi Cosminexus Application Server Version 5

Hitachi Cosminexus Developer Version 5

Hitachi Ucosminexus Developer Light

Hitachi Ucosminexus Application Server Enterprise

Hitachi uCosminexus Service Architect

Hitachi Ucosminexus Application Server Smart Edition

Hitachi Cosminexus Server - Standard Edition Version 4

Hitachi Cosminexus Developer Professional Version 6

Hitachi Cosminexus Server - Enterprise Edition

Remediation

Patch Available

http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html

Event History

Jan 26, 2007

CVE Published

12:28 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0514?

CVE-2007-0514 is classified as a high severity vulnerability affecting multiple Hitachi Web Server and Cosminexus products.

How do I fix CVE-2007-0514?

To fix CVE-2007-0514, update your Hitachi Web Server or Cosminexus products to the latest version that addresses this vulnerability.

What types of attacks does CVE-2007-0514 facilitate?

CVE-2007-0514 allows remote attackers to perform cross-site scripting (XSS) attacks via HTTP Expect headers or image maps.

Which products are affected by CVE-2007-0514?

CVE-2007-0514 affects various Hitachi products, including Hitachi Web Server, uCosminexus, and Cosminexus Server across several versions.

Can CVE-2007-0514 be exploited without authentication?

Yes, CVE-2007-0514 can be exploited by remote attackers without authentication, making it particularly dangerous.