RSS   Vulnerabilities for
'Ucosminexus application server standard'
   RSS

2007-11-05
 
CVE-2007-5810

CWE-20
 

 
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.

 
 
CVE-2007-5809

CWE-79
 

 
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.

 
2007-10-08
 
CVE-2007-5281

CWE-DesignError
 

 
The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be the same as CVE-2007-3698.

 
2007-09-08
 
CVE-2007-4760

CWE-79
 

 
The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as CVE-2007-3503.

 
 
CVE-2007-4759

CWE-119
 

 
Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service via unspecified vectors.

 
 
CVE-2007-4758

CWE-119
 

 
Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors.

 
2007-08-27
 
CVE-2007-4564

CWE-264
 

 
Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges.

 
 
CVE-2007-4563

CWE-264
 

 
Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.

 
2007-01-25
 
CVE-2007-0514

 

 
Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.

 

 >>> Vendor: Hitachi 188 Products
Groupmax mail - security option
Pki runtime library
Cosminexus enterprise
Cosminexus server
Jp1 p-1b41-9461
Jp1 p-1b41-9471
Jp1 p-1j41-9471
Groupmax world wide web desktop
Groupmax world wide web
Web page generator
Web page generator enterprise
Alaxala
Gr3000
Gr4000
Gs4000
Cosminexus application server
Ip5000 voip wifi phone
Cosminexus collaboration portal
Groupmax collaboration portal
Groupmax collaboration web client
Groupmax mail smtp
Business logic
Cm2-network node manager
Jp1-cm2-network node manager 250
Hitsenser data mart server
Jpi netsight ii port discovery advance
Jpi netsight ii port discovery standard
Groupmax world wide web desktop scheduler
Groupmax world wide web scheduler
Xfit s
Xfit s jca
Xfit s zengin
Xfit s zgin
Jp1-cm2-network node manager
Jpi automatic job management system 2
Jpi performance management
Jpi pfm snmp system observer
Jpi security integrated manager
Jpi server conductor blade server manager
Jpi server conductor server manager
Jpi server system observer - report feature
Groupmax integrated desktop
Groupmax mail
Eur print service
Eur print service for ilf
Eur professional
Eur viewer
Hitsenser3
Groupmax address server
Groupmax mail server
Hitachi directory server 2
Tpi link
Tpi server base
Hirdb parallel server
Hirdb single server
Hirdb single server workgroup edition
Hirdb workgroup server
Hirdb datareplicator
Cosminexus application server version 5
Cosminexus developer light version 6
Cosminexus developer professional version 6
Cosminexus developer standard version 6
Cosminexus developer version 5
Cosminexus server - enterprise edition
Cosminexus server - standard edition
Cosminexus server - standard edition version 4
Cosminexus server - web edition
Cosminexus server - web edition version 4
Hitachi web server
Ucosminexus application server enterprise
Ucosminexus application server smart edition
Ucosminexus application server standard
Ucosminexus developer light
Ucosminexus developer standard
Ucosminexus service architect
Ucosminexus service platform
Hibun advanced edition server
Jpi hibun advanced edition server
Cm2-network node manager 250
Jp1-cm2-network node manager starter
Jp1-cm2-network node manager starter 250
Osas/ft/w
Ucosminexus collaboration portal
Ucosminexus content manager
Jp1-hicommand device manager
Jp1-hicommand global link availability manager
Jp1-hicommand replication monitor
Jp1-hicommand tiered storage manager
Jp1-hicommand tuning manager
Cosminexus component container
Electronic form workflow
Ucosminexus application server
Ucosminexus developer
Ucosminexus erp integrator
Groupmax mobile option
XP W
Tp1 net osi-tp-extended
Cosminexus tpbroker
Tpbroker
Tpbroker developer
See all Products for Vendor Hitachi


Copyright 2019, cxsecurity.com

 

Back to Top