Cross site scripting

2007-07-0916:30:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.6%

JSON

Cross-site scripting (XSS) vulnerability in the Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replication Monitor, and GlobalLink Availability Manager before 20070528 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.

CPENameOperatorVersion
jp1-hicommand_device_managereq5-50 windows
jp1-hicommand_device_managereq5-0 windows
jp1-hicommand_device_managereq2-30 solaris
jp1-hicommand_device_managereq5-50 solaris
jp1-hicommand_device_managereq2-30 windows
jp1-hicommand_device_managereq5-10 linux
jp1-hicommand_device_managereq5-50 linux
jp1-hicommand_device_managereq5-0 solaris
jp1-hicommand_global_link_availability_managereq5-0 windows
jp1-hicommand_replication_monitoreq4-0 windows

Name	Operator	Version
jp1-hicommand_device_manager	eq	5-50 windows
jp1-hicommand_device_manager	eq	5-0 windows
jp1-hicommand_device_manager	eq	2-30 solaris
jp1-hicommand_device_manager	eq	5-50 solaris
jp1-hicommand_device_manager	eq	2-30 windows
jp1-hicommand_device_manager	eq	5-10 linux
jp1-hicommand_device_manager	eq	5-50 linux
jp1-hicommand_device_manager	eq	5-0 solaris
jp1-hicommand_global_link_availability_manager	eq	5-0 windows
jp1-hicommand_replication_monitor	eq	4-0 windows

Rows per page:

1-10 of 211

References

osvdb.org/37848

osvdb.org/37849

secunia.com/advisories/25973

www.hitachi-support.com/security_e/vuls_e/HS07-017_e/index-e.html

www.securityfocus.com/bid/24797

www.vupen.com/english/advisories/2007/2457

exchange.xforce.ibmcloud.com/vulnerabilities/35286