CVE-2007-5809

CVE Descriptions

Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	4.3		AV:N/AC:M/Au:N/C:N/I:P/A:N	nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Products Mentioned

Configuraton 0

Hitachi>>Cosminexus_application_server_enterprise >> Version To (including) 06_51_j

Hitachi>>Cosminexus_application_server_standard >> Version To (including) 06_51_j

Hitachi>>Cosminexus_developer_light_version_6 >> Version To (including) 06_51_j

Hitachi>>Cosminexus_developer_professional_version_6 >> Version To (including) 06_51_j

Hitachi>>Cosminexus_developer_standard_version_6 >> Version To (including) 06_51_j

Hitachi>>Cosminexus_server >> Version To (including) 04_01

Hitachi>>Cosminexus_server >> Version 04-00 (Open CPE detail)
Hitachi>>Cosminexus_server >> Version 04-00 (Open CPE detail)
Hitachi>>Cosminexus_server >> Version 04-00-\/a (Open CPE detail)
Hitachi>>Cosminexus_server >> Version 04-00-\/a (Open CPE detail)
Hitachi>>Cosminexus_server >> Version 04-01 (Open CPE detail)
Hitachi>>Cosminexus_server >> Version 04-01 (Open CPE detail)
Hitachi>>Cosminexus_server >> Version 04-01-\/a (Open CPE detail)
Hitachi>>Cosminexus_server >> Version 04-01-\/a (Open CPE detail)

Hitachi>>Ucosminexus_application_server_enterprise >> Version To (including) 07_50_01

Hitachi>>Ucosminexus_application_server_standard >> Version To (including) 07_50_01

Hitachi>>Ucosminexus_developer_light >> Version To (including) 06_71_d

Hitachi>>Ucosminexus_developer_professional >> Version To (including) 07_50_01

Hitachi>>Ucosminexus_developer_standard >> Version To (including) 07_50_01

Hitachi>>Ucosminexus_service_architect >> Version To (including) 07_50_01

Hitachi>>Ucosminexus_service_architect >> Version 6.7 (Open CPE detail)
Hitachi>>Ucosminexus_service_architect >> Version 7 (Open CPE detail)
Hitachi>>Ucosminexus_service_architect >> Version 07-00 (Open CPE detail)
Hitachi>>Ucosminexus_service_architect >> Version 07-00-05 (Open CPE detail)
Hitachi>>Ucosminexus_service_architect >> Version 07-00-06 (Open CPE detail)
Hitachi>>Ucosminexus_service_architect >> Version 07-00-09 (Open CPE detail)
Hitachi>>Ucosminexus_service_architect >> Version 07-00-10 (Open CPE detail)
Hitachi>>Ucosminexus_service_architect >> Version 07-03-02 (Open CPE detail)
Hitachi>>Ucosminexus_service_architect >> Version 07-03-03 (Open CPE detail)
Hitachi>>Ucosminexus_service_architect >> Version 07-50-09 (Open CPE detail)
Hitachi>>Ucosminexus_service_architect >> Version 07-60 (Open CPE detail)

Hitachi>>Ucosminexus_service_platform >> Version To (including) 07_50_01

Hitachi>>Ucosminexus_service_platform >> Version 6.7 (Open CPE detail)
Hitachi>>Ucosminexus_service_platform >> Version 7 (Open CPE detail)
Hitachi>>Ucosminexus_service_platform >> Version 07-00 (Open CPE detail)
Hitachi>>Ucosminexus_service_platform >> Version 07-00-05 (Open CPE detail)
Hitachi>>Ucosminexus_service_platform >> Version 07-00-06 (Open CPE detail)
Hitachi>>Ucosminexus_service_platform >> Version 07-00-09 (Open CPE detail)
Hitachi>>Ucosminexus_service_platform >> Version 07-00-10 (Open CPE detail)
Hitachi>>Ucosminexus_service_platform >> Version 07-03-02 (Open CPE detail)
Hitachi>>Ucosminexus_service_platform >> Version 07-03-03 (Open CPE detail)
Hitachi>>Ucosminexus_service_platform >> Version 07-10 (Open CPE detail)
Hitachi>>Ucosminexus_service_platform >> Version 07-50-09 (Open CPE detail)
Hitachi>>Ucosminexus_service_platform >> Version 07-60 (Open CPE detail)

Hitachi>>Web_server >> Version 01_00

Hitachi>>Web_server >> Version 01_01

Hitachi>>Web_server >> Version 01_01_d

Hitachi>>Web_server >> Version 01_02_d

Hitachi>>Web_server >> Version 01_02_e

Hitachi>>Web_server >> Version 02_00

Hitachi>>Web_server >> Version 02_00_a

Hitachi>>Web_server >> Version 02_02

Hitachi>>Web_server >> Version 02_04_b

Hitachi>>Web_server >> Version 02_06_a

Hitachi>>Web_server >> Version 03_00

Hitachi>>Web_server >> Version 03_00_01

References

http://secunia.com/advisories/27421
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2007/3666
Tags : vdb-entry, x_refsource_VUPEN

http://www.hitachi-support.com/security_e/vuls_e/HS07-035_e/index-e.html
Tags : x_refsource_CONFIRM

http://www.securityfocus.com/bid/26271
Tags : vdb-entry, x_refsource_BID

http://osvdb.org/42027
Tags : vdb-entry, x_refsource_OSVDB

CVE-2007-5809 : Detail