JVNDB-2013-002770

[Japanese]
JVNDB-2013-002770
Cross-site Scripting Vulnerability in JP1/Automatic Operation
Overview
JP1/Automatic Operation contains a cross-site scripting vulnerability.
CVSS Severity (What is CVSS?)
CVSS V2 Severity: Base Metrics 4.3 (Medium) [Vendor Score] Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
Affected Products

Hitachi, Ltd JP1/Automatic Operation
Please refer to HS13-011 provided by Hitachi for more details.
Impact
A remote attacker could make a user execute malicious scripts.
Solution
Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action.
Vendor Information
Hitachi, Ltd Hitachi Software Vulnerability Information : HS13-011
CWE (What is CWE?)
Cross-site Scripting(CWE-79) [IPA Evaluation]
CVE (What is CVE?)

References

Revision History
[2013/05/21] Web page was published

Cross-site Scripting Vulnerability in JP1/Automatic Operation