Hitachi Cosminexus Developer Professional Version 6 vulnerabilities

3 CVEs affecting Hitachi Cosminexus Developer Professional Version 6, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-5810, published 2007-11-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-0514, published 2007-01-26. Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML…
CVE-2007-5809, published 2007-11-05. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via…
CVE-2007-5810, published 2007-11-05. Medium severity, CVSS 5.0. EPSS: 0.8% chance of exploitation in the next 30 days. Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a…