CVE-2007-4563: Hitachi Cosminexus Application Server Enterprise

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.

Affected products

• Hitachi Cosminexus Application Server Enterprise: version 06_50 only; version 06_50_b only; version 06_50_c only; version 06_50_c_1 only; version 06_50_e_1 only; version 06_50_f only; …
• Hitachi Cosminexus Application Server Standard: version 06_50 only; version 06_50_b only; version 06_50_c only; version 06_50_c_1 only; version 06_50_e_1 only; version 06_50_f only; …
• Hitachi Electronic Form Workflow - Standard Set: version 07_00 only; version 07_00_b only
• Hitachi Electronic Form Workflow -Professional Library Set: version 07_00 only; version 07_00_b only
• Hitachi Ucosminexus Application Server Enterprise: version 06_70 only; version 06_70_a only; version 06_70_b only; version 06_70_b_1 only; version 06_70_d only; version 06_70_g only; …
• Hitachi Ucosminexus Application Server Standard: version 06_70 only; version 06_70_a only; version 06_70_b only; version 06_70_b_1 only; version 06_70_c only; version 06_70_d only; …
• Hitachi Ucosminexus Service Platform: version 07_00 only; version 07_10 only

Published 2007-08-28. Last modified 2026-06-16.