CVE-2007-0514
Estado: ModificadaMedia (6.8)—
Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
- Puntuación base: 6.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.24%
- Percentil entre todas las CVEs puntuadas: 68
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (19)
Hitachi — Cosminexus Application ServerHitachi — Cosminexus Application Server Version 5Hitachi — Cosminexus Developer Light Version 6Hitachi — Cosminexus Developer Professional Version 6Hitachi — Cosminexus Developer Standard Version 6Hitachi — Cosminexus Developer Version 5Hitachi — Cosminexus Server - Enterprise EditionHitachi — Cosminexus Server - Standard EditionHitachi — Cosminexus Server - Standard Edition Version 4Hitachi — Cosminexus Server - WEB EditionHitachi — Cosminexus Server - WEB Edition Version 4Hitachi — Hitachi WEB ServerHitachi — Ucosminexus Application Server EnterpriseHitachi — Ucosminexus Application Server Smart EditionHitachi — Ucosminexus Application Server StandardHitachi — Ucosminexus Developer LightHitachi — Ucosminexus Developer StandardHitachi — Ucosminexus Service ArchitectHitachi — Ucosminexus Service Platform
CWE
- NVD-CWE-Other
Referencias
- http://osvdb.org/32997
- http://osvdb.org/32998
- http://secunia.com/advisories/23843
- http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html
- http://www.vupen.com/english/advisories/2007/0326
- http://osvdb.org/32997
- http://osvdb.org/32998
- http://secunia.com/advisories/23843
- http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html
- http://www.vupen.com/english/advisories/2007/0326
JSON original (NVD)
Mostrar
{
"id": "CVE-2007-0514",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2007-01-26T00:28:00.000",
"references": [
{
"url": "http://osvdb.org/32997",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/32998",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/23843",
"source": "cve@mitre.org"
},
{
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2007/0326",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/32997",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/32998",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/23843",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2007/0326",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps."
},
{
"lang": "es",
"value": "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Hitachi Web Server, uCosminexus, y productos Cosminexus anteriores al 24/01/2007 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante (1) cabeceras HTTP Expect o (2) imágenes de mapas."
}
],
"lastModified": "2026-06-16T22:35:43.790",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72EB5501-8682-47C6-A09B-64D628C319CB"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:6:*:enterprise:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "336AC0E8-01DB-4D75-8F9F-E1673BE7883A"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server_version_5:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F49A94B-6343-4A24-8E8D-461192CD643A"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer_light_version_6:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CB9CE4D-B179-488A-881B-EDDE858DF8C6"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer_professional_version_6:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19698339-17FB-443A-A3A8-E6E364F6E892"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer_standard_version_6:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED7AB561-DC97-4ACB-8810-B8020F28B769"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer_version_5:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5976B0CF-D923-4D74-A599-028E20D14AF5"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server_-_enterprise_edition:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6DBFEFD-4667-4487-B009-F5133260D6A5"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server_-_standard_edition:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B3B8F3B-156B-44B0-97EF-F2DF622D8398"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server_-_standard_edition_version_4:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CC5DA2A-6880-491A-A2FD-327CF952E977"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server_-_web_edition:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "394A48A2-C95B-4B1F-A571-77FFD1DA9F0D"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server_-_web_edition_version_4:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BC015FD-6D1D-4A6C-A480-326614BEB5BA"
},
{
"criteria": "cpe:2.3:a:hitachi:hitachi_web_server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3721DE3-39EC-4C4A-B575-9F5CF2D21BE2"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server_enterprise:*:*:enterprise:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B00BB4D-1C8A-4CFE-9EA4-5CBE055276DE"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server_smart_edition:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "980D0920-2D78-4EAF-8C99-C9928708C825"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server_standard:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88B1B8FF-8362-471C-85DB-01D675764DF8"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer_light:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7148FC73-6087-4F89-8832-7888D3502E85"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer_standard:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C937879-7AC4-4B36-BC3A-3C9B620A17F4"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_architect:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "354BD4CE-7B1A-4442-9F87-08CD70D9499E"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72E63548-3AB3-4B78-AA2D-5B2AC7E06DD7"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}