XSS Vulnerability in Hitachi JP1/HiCommand Device Manager and Related Products
CVE-2007-3623

Currently unrated

Key Information:

Vendor
Hitachi
Status
Jp1-hicommand Device Manager
Jp1-hicommand Replication Monitor
Jp1-hicommand Tiered Storage Manager
Jp1-hicommand Global Link Availability Manager
Vendor
CVE Published:
9 July 2007

Summary

The Hitachi JP1/HiCommand Device Manager and several of its related products are susceptible to a cross-site scripting vulnerability due to improper handling of the Expect HTTP header. This flaw allows remote attackers to inject arbitrary web scripts or HTML into web pages viewed by users, potentially compromising sensitive user information and allowing a range of malicious activities.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/35286
vdb-entryx_refsource_XF
http://osvdb.org/37848
vdb-entryx_refsource_OSVDB
http://www.hitachi-support.com/security_e/vuls_e/HS07-017...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.