Hitachi Groupmax World Wide Web Desktop vulnerabilities

4 CVEs affecting Hitachi Groupmax World Wide Web Desktop, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-2087, published 2006-04-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-2087, published 2006-04-29. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a denial of service (application hang or erroneous behavior) via an attachment with an MS-DOS device filename.
CVE-2006-1574, published 2006-04-01. Medium severity, CVSS 5.8. EPSS: 1.3% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web, World Wide Web Desktop, World Wide Web for Scheduler, and Desktop for Scheduler, allows remote attackers to inject arbitrary web…
CVE-2004-2493, published 2004-12-31. Medium severity, CVSS 4.0. EPSS: 1.3% chance of exploitation in the next 30 days. Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichitai allows remote authenticated users to read arbitrary .html files via the…
CVE-2004-2492, published 2004-12-31. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web (GmaxWWW) Desktop 5, 6, and Desktop for Jichitai 6, allows remote attackers to inject arbitrary web script or HTML via the QUERY…