CVE-2007-3623

MEDIUM 4.3CVE-2007-3623 · Published 09/07/2007 · updated 16/06/2026

In short

CVE-2007-3623 is a MEDIUM (CVSS 4.3) vulnerability affecting jp1-hicommand device manager (hitachi), jp1-hicommand global link availability manager (hitachi), jp1-hicommand replication monitor (hitachi).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jp1-hicommand device manager hitachi	`= 02_30= 05_00= 05_10= 05_50`	No fix yet
jp1-hicommand global link availability manager hitachi	`= 05_00`	No fix yet
jp1-hicommand replication monitor hitachi	`= 04_00= 05_00= 05_50`	No fix yet
jp1-hicommand tiered storage manager hitachi	`= 04_00= 04_30= 05_00= 05_50`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replication Monitor, and GlobalLink Availability Manager before 20070528 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.

References

More vulnerabilities in jp1-hicommand device manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free