CVE-2004-2497

MEDIUM 4.3CVE-2004-2497 · Published 31/12/2004 · updated 16/06/2026

In short

CVE-2004-2497 is a MEDIUM (CVSS 4.3) vulnerability affecting web page generator (hitachi), web page generator enterprise (hitachi).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
web page generator hitachi	`= 01_00= 01_01_c= 02_00= 02_00_c`	No fix yet
web page generator enterprise hitachi	`= 03_00= 03_02_c= 03_03= 03_03_c= 03_03_d= 04_00= 04_00_c= 04_01= 04_01_b`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

References

secunia.com/advisories/12150 · Vendor Advisory
hitachi-support.com/security_e/vuls_e/HS04-003_e/index-e.html · Vendor Advisory
osvdb.org/8264
securityfocus.com/bid/10818
exchange.xforce.ibmcloud.com/vulnerabilities/16822

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free