Cosminexus Application Server
Approved changes feed: RSS · Atom
cpe:2.3:a:hitachi:cosminexus_application_server:6:*:enterprise:*:*:*:*:*
part: a version: 6 update: *
| Vendor | Hitachi (437a37e3-5ce7-5362-9e23-5ea2c73e6d98) |
|---|---|
| Product | Cosminexus Application Server (f0b1d639-e58d-5e89-af2a-82f0841e8672) |
| Edition | enterprise |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-4124 |
vulnerable | 2026-06-08 04:49:55.730320 |
Details available
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.
Published: 2007-08-01T16:00:00.000Z
Updated: 2024-08-07T14:46:38.979Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0514 |
vulnerable | 2026-06-08 04:49:32.679129 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.
Published: 2007-01-26T00:00:00.000Z
Updated: 2024-08-07T12:19:30.531Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.