Hitachi Cosminexus Application Server Standard vulnerabilities

4 CVEs affecting Hitachi Cosminexus Application Server Standard, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-5810, published 2007-11-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-5809, published 2007-11-05. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via…
CVE-2007-5810, published 2007-11-05. Medium severity, CVSS 5.0. EPSS: 0.8% chance of exploitation in the next 30 days. Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a…
CVE-2007-4564, published 2007-08-28. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges.
CVE-2007-4563, published 2007-08-28. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.