Sign-up

ID

VAR-201502-0541


TITLE

Cross-site Scripting Vulnerability in JP1/IT Desktop Management - Manager and Hitachi IT Operations Director

Trust: 0.8

sources: JVNDB: JVNDB-2015-001557

DESCRIPTION

A cross-site scripting vulnerability was found in the online help of JP1/IT Desktop Management - Manager and Hitachi IT Operations Director. Remote users can exploit a cross-site scripting vulnerability to execute malicious scripts.

Trust: 0.8

sources: JVNDB: JVNDB-2015-001557

AFFECTED PRODUCTS

vendor:hitachimodel:it operations directorscope: - version: -

Trust: 0.8

vendor:hitachimodel:job management partner 1/it desktop management - managerscope: - version: -

Trust: 0.8

vendor:hitachimodel:jp1/it desktop managementscope:eqversion:2 - manager

Trust: 0.8

vendor:hitachimodel:jp1/it desktop management - managerscope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2015-001557

CVSS

SEVERITY

CVSSV2

CVSSV3

VENDOR: JVNDB-2015-001557
value: MEDIUM

Trust: 0.8

VENDOR: JVNDB-2015-001557
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

sources: JVNDB: JVNDB-2015-001557

PROBLEMTYPE DATA

problemtype:CWE-79

Trust: 0.8

sources: JVNDB: JVNDB-2015-001557

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2015-001557

PATCH
title:HS15-005url:http://www.hitachi.co.jp/prod/comp/soft1/global/security/info/vuls/hs15-005/index.html
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2015-001557

EXTERNAL IDS
db:JVNDBid:JVNDB-2015-001557
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2015-001557

SOURCES
db:JVNDBid:JVNDB-2015-001557

LAST UPDATE DATE
2022-05-04T09:12:08.707000+00:00

SOURCES UPDATE DATE
db:JVNDBid:JVNDB-2015-001557date:2015-02-27T00:00:00

SOURCES RELEASE DATE
db:JVNDBid:JVNDB-2015-001557date:2015-02-27T00:00:00