Hitachi Groupmax World Wide Web vulnerabilities

3 CVEs affecting Hitachi Groupmax World Wide Web, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-2087, published 2006-04-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-2087, published 2006-04-29. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a denial of service (application hang or erroneous behavior) via an attachment with an MS-DOS device filename.
CVE-2006-1574, published 2006-04-01. Medium severity, CVSS 5.8. EPSS: 1.3% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web, World Wide Web Desktop, World Wide Web for Scheduler, and Desktop for Scheduler, allows remote attackers to inject arbitrary web…
CVE-2004-2493, published 2004-12-31. Medium severity, CVSS 4.0. EPSS: 1.3% chance of exploitation in the next 30 days. Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichitai allows remote authenticated users to read arbitrary .html files via the…