CVE-2004-2497: Hitachi Web Page Generator

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

Affected products

• Hitachi Web Page Generator: version 01_00 only; version 01_01_c only; version 02_00 only; version 02_00_c only
• Hitachi Web Page Generator Enterprise: version 03_00 only; version 03_02_c only; version 03_03 only; version 03_03_c only; version 03_03_d only; version 04_00 only; …

Published 2004-12-31. Last modified 2026-06-16.