« Volver al listado

CVE-2007-3043

Estado: ModificadaMedia (4.3)—

Cross-site scripting (XSS) vulnerability in Collaboration - File Sharing 01-20 up to 01-20-/B and 01-30 up to 01-30-/B in Hitachi Groupmax Collaboration Portal up to 07-30-/D, Groupmax Collaboration Web Client - Forum/File Sharing up to 07-30-/C, uCosminexus Collaboration Portal up to 06-30-/D, and uCosminexus Collaboration Portal - Forum/File Sharing up to 06-30-/C on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Hitachi — Groupmax Collaboration PortalHitachi — Groupmax Collaboration WEB ClientHitachi — Ucosminexus Collaboration Portal

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-3043",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-06-05T23:30:00.000",
  "references": [
    {
      "url": "http://osvdb.org/36828",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/25507",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-011_e/index-e.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/24263",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2020",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34659",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/36828",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/25507",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-011_e/index-e.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/24263",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2020",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34659",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in Collaboration - File Sharing 01-20 up to 01-20-/B and 01-30 up to 01-30-/B in Hitachi Groupmax Collaboration Portal up to 07-30-/D, Groupmax Collaboration Web Client - Forum/File Sharing up to 07-30-/C, uCosminexus Collaboration Portal up to 06-30-/D, and uCosminexus Collaboration Portal - Forum/File Sharing up to 06-30-/C on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Collaboration - File Sharing 01-20 hasta 01-20-/B y 01-30 hasta 01-30-/B en Hitechi Groupmax Collaboration Portal hasta 07-30-/D, Groupmax Collaboration Web Client - Forum/File Sharing hasta 07-30-/C, uCosminexus Collaboration Portal hasta 06-30-/D, y uCosminexus Collaboration Portal - Forum/File Sharing hasta 06-30-/C en Windows permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T22:40:56.250",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hitachi:groupmax_collaboration_portal:7_20_e:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "13120E63-ACC6-4EF5-AEA4-1E486A371E47"
            },
            {
              "criteria": "cpe:2.3:a:hitachi:groupmax_collaboration_portal:7_30_d:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A9F6574-2A52-4B07-98A7-3B221AA5B95D"
            },
            {
              "criteria": "cpe:2.3:a:hitachi:groupmax_collaboration_web_client:forum_file_share_7_20_d:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50C1C230-4C34-4D13-B551-F1DB59B78088"
            },
            {
              "criteria": "cpe:2.3:a:hitachi:groupmax_collaboration_web_client:forum_file_share_7_30_c:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "784BF814-5C77-4E6C-BA0F-87DF10AF443E"
            },
            {
              "criteria": "cpe:2.3:a:hitachi:ucosminexus_collaboration_portal:6_20_e:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5DD7D1C0-1BA1-428E-BE20-FB3A34647A24"
            },
            {
              "criteria": "cpe:2.3:a:hitachi:ucosminexus_collaboration_portal:6_30_d:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "608F37DD-D295-4F2D-A9F6-CAAF431EA76A"
            },
            {
              "criteria": "cpe:2.3:a:hitachi:ucosminexus_collaboration_portal:forum_file_share_6_20_d:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C5E178D-7E4C-4A02-8F61-9F1091C30885"
            },
            {
              "criteria": "cpe:2.3:a:hitachi:ucosminexus_collaboration_portal:forum_file_share_6_30_c:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B4F03B2-D400-4152-997E-373CCECC9FAD"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}