CVE-2007-5809
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hitachi:cosminexus_application_server_enterprise
- hitachi:cosminexus_application_server_standard
- hitachi:cosminexus_developer_light_version_6
- hitachi:cosminexus_developer_professional_version_6
- hitachi:cosminexus_developer_standard_version_6
- hitachi:cosminexus_server
- hitachi:ucosminexus_application_server_enterprise
- hitachi:ucosminexus_application_server_standard
- hitachi:ucosminexus_developer_light
- hitachi:ucosminexus_developer_professional
- hitachi:ucosminexus_developer_standard
- hitachi:ucosminexus_service_architect
- hitachi:ucosminexus_service_platform
- hitachi:web_server