ID

VAR-201512-0624


TITLE

Cross-site Scripting Vulnerability in uCosminexus Portal Framework and Groupmax Collaboration

Trust: 0.8

sources: JVNDB: JVNDB-2015-006527

DESCRIPTION

A cross-site scripting vulnerability was found in uCosminexus Portal Framework and Groupmax Collaboration.Remote users can exploit a cross-site scripting vulnerability to execute malicious scripts.

Trust: 0.8

sources: JVNDB: JVNDB-2015-006527

AFFECTED PRODUCTS

vendor:hitachimodel:groupmax collaboration portalscope: - version: -

Trust: 0.8

vendor:hitachimodel:groupmax collaboration web clientscope:eqversion:- forum/file sharing

Trust: 0.8

vendor:hitachimodel:groupmax collaboration web client - mail/schedulescope: - version: -

Trust: 0.8

vendor:hitachimodel:ucosminexus collaboration portalscope: - version: -

Trust: 0.8

vendor:hitachimodel:ucosminexus collaboration portalscope:eqversion:- forum/file sharing

Trust: 0.8

vendor:hitachimodel:ucosminexus portal frameworkscope: - version: -

Trust: 0.8

vendor:hitachimodel:ucosminexus portal frameworkscope:eqversion:- light

Trust: 0.8

sources: JVNDB: JVNDB-2015-006527

CVSS

SEVERITY

CVSSV2

CVSSV3

VENDOR: JVNDB-2015-006527
value: LOW

Trust: 0.8

VENDOR: JVNDB-2015-006527
severity: LOW
baseScore: 3.5
vectorString: AV:N/AC:M/AU:S/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: SINGLE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

sources: JVNDB: JVNDB-2015-006527

PROBLEMTYPE DATA

problemtype:CWE-79

Trust: 0.8

sources: JVNDB: JVNDB-2015-006527

CONFIGURATIONS

sources: JVNDB: JVNDB-2015-006527

PATCH

title:HS15-034url:http://www.hitachi.co.jp/prod/comp/soft1/global/security/info/vuls/hs15-034/index.html

Trust: 0.8

sources: JVNDB: JVNDB-2015-006527

EXTERNAL IDS

db:JVNDBid:JVNDB-2015-006527

Trust: 0.8

sources: JVNDB: JVNDB-2015-006527

SOURCES

db:JVNDBid:JVNDB-2015-006527

LAST UPDATE DATE

2022-05-04T09:34:38.569000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2015-006527date:2016-02-10T00:00:00

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2015-006527date:2015-12-28T00:00:00