ID

VAR-201212-0411


TITLE

Cross-site Scripting Vulnerability in Collaboration - Bulletin board in Multiple Hitachi Products

Trust: 0.8

sources: JVNDB: JVNDB-2012-005827

DESCRIPTION

A cross-site scripting vulnerability has been found in Collaboration - Bulletin board in multiple Hitachi products.Remote users can exploit this vulnerability to execute malicious scripts.

Trust: 0.8

sources: JVNDB: JVNDB-2012-005827

AFFECTED PRODUCTS

vendor:hitachimodel:groupmax collaboration portalscope: - version: -

Trust: 0.8

vendor:hitachimodel:groupmax collaboration web clientscope:eqversion:- forum/file sharing

Trust: 0.8

vendor:hitachimodel:groupmax collaboration web clientscope:eqversion:- mail/schedule

Trust: 0.8

vendor:hitachimodel:ucosminexus collaboration portalscope: - version: -

Trust: 0.8

vendor:hitachimodel:ucosminexus collaboration portalscope:eqversion:- forum/file sharing

Trust: 0.8

sources: JVNDB: JVNDB-2012-005827

CVSS

SEVERITY

CVSSV2

CVSSV3

VENDOR: JVNDB-2012-005827
value: MEDIUM

Trust: 0.8

VENDOR: JVNDB-2012-005827
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

sources: JVNDB: JVNDB-2012-005827

PROBLEMTYPE DATA

problemtype:CWE-79

Trust: 0.8

sources: JVNDB: JVNDB-2012-005827

CONFIGURATIONS

sources: JVNDB: JVNDB-2012-005827

PATCH

title:HS12-029url:http://www.hitachi.co.jp/prod/comp/soft1/security/info/vuls/hs12-029/index.html

Trust: 0.8

sources: JVNDB: JVNDB-2012-005827

EXTERNAL IDS

db:JVNDBid:JVNDB-2012-005827

Trust: 0.8

sources: JVNDB: JVNDB-2012-005827

SOURCES

db:JVNDBid:JVNDB-2012-005827

LAST UPDATE DATE

2022-05-04T10:23:14.414000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2012-005827date:2012-12-28T00:00:00

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2012-005827date:2012-12-28T00:00:00