[Japanese] | |
JVNDB-2017-003108 | |
Multiple Vulnerabilities in Hitachi IT Operations Director and JP1/IT Desktop Management | |
Overview | |
A cross-site scripting and an XML external entity (XXE) vulnerability have been found in Hitachi IT Operations Director, JP1/IT Desktop Management - Manager and JP1/IT Desktop Management 2 - Manager. | |
CVSS Severity (What is CVSS?) | |
CVSS V3 Severity:
Base Metrics 8.1 (High) [Vendor Score]
CVSS V2 Severity:
Base Metrics 7.5 (High) [Vendor Score]
| |
Affected Products | |
| |
Hitachi, Ltd | |
Please refer to the vendor information for more details. | |
Impact | |
An attacker may conduct a cross-site scripting attack and a XML external entity (XXE) attack. | |
Solution | |
Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action. | |
Vendor Information | |
Hitachi, Ltd | |
CWE (What is CWE?) | |
| |
CVE (What is CVE?) | |
| |
References | |
| |
Revision History | |
|
Date Public | 2017/05/15 |
Date First Published | 2017/06/30 |
Date Last Updated | 2017/06/30 |