CVE-2007-0514: Hitachi Cosminexus Application Server

Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.

Affected products

• Hitachi Cosminexus Application Server: any version; version 6 only
• Hitachi Cosminexus Application Server Version 5: any version
• Hitachi Cosminexus Developer Light Version 6: any version
• Hitachi Cosminexus Developer Professional Version 6: any version
• Hitachi Cosminexus Developer Standard Version 6: any version
• Hitachi Cosminexus Developer Version 5: any version
• Hitachi Cosminexus Server - Enterprise Edition: any version
• Hitachi Cosminexus Server - Standard Edition: any version
• Hitachi Cosminexus Server - Standard Edition Version 4: any version
• Hitachi Cosminexus Server - Web Edition: any version
• Hitachi Cosminexus Server - Web Edition Version 4: any version
• Hitachi Hitachi Web Server: any version
• Hitachi Ucosminexus Application Server Enterprise: any version
• Hitachi Ucosminexus Application Server Smart Edition: any version
• Hitachi Ucosminexus Application Server Standard: any version
• Hitachi Ucosminexus Developer Light: any version
• Hitachi Ucosminexus Developer Standard: any version
• Hitachi Ucosminexus Service Architect: any version
• Hitachi Ucosminexus Service Platform: any version

Published 2007-01-26. Last modified 2026-06-16.