Hitachi Cosminexus Enterprise vulnerabilities

2 CVEs affecting Hitachi Cosminexus Enterprise, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-1478, published 2004-12-31.

More from Hitachi.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-0928, published 2004-10-05. Medium severity, CVSS 5.0. EPSS: 4.1% chance of exploitation in the next 30 days. The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files,…
• CVE-2004-1478, published 2004-12-31. High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days. JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session.