| Package | Affected versions | Patched versions |
|---|---|---|
| cosminexus collaboration portal | = 06_00≤ 06_10_b | |
| groupmax collaboration portal | = 07_00≤ 07_10_b | |
| groupmax collaboration web client | = 07_00≤ 07_10_a |
Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A allow remote attackers to inject arbitrary web script or HTML via the (1) Schedule and (2) Calendar components.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free