JVNDB-2008-001350

Hitachi Groupmax Collaboration Products Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been found in the Hitachi Groupmax Collaboration products.

Base Metrics: 4.3 (Medium) [IPA Score]

• Access Vector: Network
• Access Complexity: Medium
• Authentication: None
• Confidentiality Impact: None
• Integrity Impact: Partial
• Availability Impact: None

Hitachi, Ltd

• Cosminexus Collaboration Portal
• Cosminexus Collaboration Portal - Forum/File Sharing
• Groupmax Collaboration Portal
• Groupmax Collaboration Web Client - Mail/Schedule
• Groupmax Collaboration Web Client - Forum/File Sharing
• JP1/Integrated Management - Service Support
• uCosminexus Collaboration Portal
• uCosminexus Collaboration Portal - Forum/File Sharing
• uCosminexus Content Manager

A remote attacker could execute arbitrary scripts.

Please refer to the 'Vendor Information' section for official countermesure and take appropriate action.

Hitachi, Ltd

• Hitachi Software Vulnerability Information : HS08-012

[2008/06/06]
  Web page published