CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
90.2%
Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-20-/D, and uCosminexus Collaboration Portal and Forum/File Sharing before 06-20-/C, allow remote attackers to “execute malicious scripts” via unknown vectors (aka HS06-014-01).
Vendor | Product | Version | CPE |
---|---|---|---|
hitachi | cosminexus_collaboration_portal | * | cpe:2.3:a:hitachi:cosminexus_collaboration_portal:*:*:*:*:*:*:*:* |
hitachi | cosminexus_collaboration_portal | 6.2 | cpe:2.3:a:hitachi:cosminexus_collaboration_portal:6.2:*:*:*:*:*:*:* |
hitachi | cosminexus_collaboration_portal | 06_00 | cpe:2.3:a:hitachi:cosminexus_collaboration_portal:06_00:*:*:*:*:*:*:* |
hitachi | groupmax_collaboration_portal | * | cpe:2.3:a:hitachi:groupmax_collaboration_portal:*:*:*:*:*:*:*:* |
hitachi | groupmax_collaboration_portal | 7.2 | cpe:2.3:a:hitachi:groupmax_collaboration_portal:7.2:*:*:*:*:*:*:* |
hitachi | groupmax_collaboration_portal | 07_00 | cpe:2.3:a:hitachi:groupmax_collaboration_portal:07_00:*:*:*:*:*:*:* |
hitachi | groupmax_collaboration_web_client | * | cpe:2.3:a:hitachi:groupmax_collaboration_web_client:*:*:*:*:*:*:*:* |
hitachi | groupmax_collaboration_web_client | 7.2 | cpe:2.3:a:hitachi:groupmax_collaboration_web_client:7.2:*:*:*:*:*:*:* |
hitachi | groupmax_collaboration_web_client | 07_00 | cpe:2.3:a:hitachi:groupmax_collaboration_web_client:07_00:*:*:*:*:*:*:* |