| Package | Affected versions | Patched versions |
|---|---|---|
| cosminexus application server enterprise | ≤ 06_51_j | |
| cosminexus application server standard | ≤ 06_51_j | |
| cosminexus developer light version 6 | ≤ 06_51_j | |
| cosminexus developer professional version 6 | ≤ 06_51_j | |
| cosminexus developer standard version 6 | ≤ 06_51_j | |
| cosminexus server | ≤ 04_01 | |
| ucosminexus application server enterprise | ≤ 07_50_01 | |
| ucosminexus application server standard | ≤ 07_50_01 | |
| ucosminexus developer light | ≤ 06_71_d | |
| ucosminexus developer professional | ≤ 07_50_01 | |
| ucosminexus developer standard | ≤ 07_50_01 | |
| ucosminexus service architect | ≤ 07_50_01 | |
| ucosminexus service platform | ≤ 07_50_01 | |
| web server | = 01_00= 01_01= 01_01_d= 01_02_d= 01_02_e= 02_00= 02_00_a= 02_02= 02_04_b= 02_06_a= 03_00= 03_00_01 |
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free