ID

VAR-201108-0316


TITLE

JP1/Performance Management - Web Console Cross-Site Scripting Vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2011-001928

DESCRIPTION

JP1/Performance Management - Web Console contains a cross-site scripting vulnerability.A remote attacker could execute malicious script on the affected system.

Trust: 0.8

sources: JVNDB: JVNDB-2011-001928

AFFECTED PRODUCTS

vendor:hitachimodel:jp1/performance managementscope:eqversion:- web console

Trust: 0.8

sources: JVNDB: JVNDB-2011-001928

CVSS

SEVERITY

CVSSV2

CVSSV3

IPA: JVNDB-2011-001928
value: MEDIUM

Trust: 0.8

IPA: JVNDB-2011-001928
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

sources: JVNDB: JVNDB-2011-001928

PROBLEMTYPE DATA

problemtype:CWE-79

Trust: 0.8

sources: JVNDB: JVNDB-2011-001928

CONFIGURATIONS

sources: JVNDB: JVNDB-2011-001928

PATCH

title:HS11-014url:http://www.hitachi.co.jp/prod/comp/soft1/global/security/info/vuls/hs11-014/index.html

Trust: 0.8

sources: JVNDB: JVNDB-2011-001928

EXTERNAL IDS

db:JVNDBid:JVNDB-2011-001928

Trust: 0.8

sources: JVNDB: JVNDB-2011-001928

SOURCES

db:JVNDBid:JVNDB-2011-001928

LAST UPDATE DATE

2022-05-04T10:01:48.177000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2011-001928date:2011-08-09T00:00:00

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2011-001928date:2011-08-09T00:00:00