CVE-2007-3623: Hitachi JP1-Hicommand Device Manager

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replication Monitor, and GlobalLink Availability Manager before 20070528 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.

Affected products

• Hitachi JP1-Hicommand Device Manager: version 02_30 only; version 05_00 only; version 05_10 only; version 05_50 only
• Hitachi JP1-Hicommand Global Link Availability Manager: version 05_00 only
• Hitachi JP1-Hicommand Replication Monitor: version 04_00 only; version 05_00 only; version 05_50 only
• Hitachi JP1-Hicommand Tiered Storage Manager: version 04_00 only; version 04_30 only; version 05_00 only; version 05_50 only

Published 2007-07-09. Last modified 2026-06-16.