[Japanese]

JVNDB-2026-037832

Multiple Vulnerabilities in Cosminexus

Overview

Cosminexus Developer's Kit for Java(TM) and Hitachi Developer's Kit for Java contain the vulnerabilities.
The vulnerabilities exist in Cosminexus Developer's Kit for Java(TM) and Hitachi Developer's Kit for Java which are components of other Hitachi products.
CVSS Severity (What is CVSS?)

CVSS V3 Severity:
Base Metrics 7.5 (High) [Vendor Score]
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
  • Confidentiality Impact: None
  • Integrity Impact: None
  • Availability Impact: High
The above CVSS base scores have been assigned for CVE-2026-41254

CVSS v3 Severity
Base Metrics:5.3 (Medium) [Vendor Score]
  • Access Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
  • Confidentiality Impact(C): None
  • Integrity Impact(I): None
  • Availability Impact(A): High
The above CVSS base scores have been assigned for CVE-2026-47057

CVSS v3 Severity
Base Metrics:6.2 (Medium) [Vendor Score]
  • Access Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
  • Confidentiality Impact(C): None
  • Integrity Impact(I): High
  • Availability Impact(A): None
The above CVSS base scores have been assigned for CVE-2026-47063
Affected Products


Hitachi, Ltd
  • Hitachi Application Server Windows 10-10 - 10-10-04
  • Hitachi Application Server Windows(x64) 10-10 - 10-11-05
  • Hitachi Application Server Linux 10-11 - 10-11-04
  • Hitachi Application Server for Developers Windows 10-10 - 10-10-04
  • Hitachi Application Server for Developers Windows(x64) 10-10 - 10-11-05
  • Hitachi Application Server for Developers Linux 10-11 - 10-11-04
  • uCosminexus Application Runtime with Java for Apache Tomcat Windows(x64) 01-20 - 01-21
  • uCosminexus Application Runtime with Java for Apache Tomcat Linux 01-00 - 01-21
  • uCosminexus Application Runtime with Java for Spring Boot Windows(x64) 01-20 - 01-21
  • uCosminexus Application Runtime with Java for Spring Boot Linux 01-00 - 01-21
  • uCosminexus Application Server Windows(x64) 11-00 - 11-70
  • uCosminexus Application Server Linux 11-00 - 11-70
  • uCosminexus Application Server AIX 11-00 - 11-00-02
  • uCosminexus Application Server Windows 09-70 - 09-70-03
  • uCosminexus Application Server Windows(x64) 09-70 - 09-87
  • uCosminexus Application Server Linux 09-70 - 09-87-01
  • uCosminexus Application Server AIX 09-70 - 09-70-02
  • uCosminexus Application Server(64) Windows(x64) 11-00 - 11-70
  • uCosminexus Application Server(64) Linux 11-00 - 11-70
  • uCosminexus Application Server(64) AIX 11-00 - 11-00-02
  • uCosminexus Application Server(64) Windows 09-70 - 09-70-03
  • uCosminexus Application Server(64) Windows(x64) 09-70 - 09-87
  • uCosminexus Application Server(64) Linux 09-70 - 09-87-01
  • uCosminexus Application Server(64) AIX 09-70 - 09-70-02
  • uCosminexus Application Server-R Windows(x64) 11-00 - 11-70
  • uCosminexus Application Server-R Linux 11-00 - 11-70
  • uCosminexus Application Server-R AIX 11-00 - 11-00-02
  • uCosminexus Application Server-R Windows 09-70 - 09-70-03
  • uCosminexus Application Server-R Windows(x64) 09-70 - 09-87
  • uCosminexus Application Server-R Linux 09-70 - 09-87-01
  • uCosminexus Application Server-R AIX 09-70 - 09-70-02
  • uCosminexus Client Windows(x64) 11-00 - 11-70
  • uCosminexus Client Linux 11-00 - 11-70
  • uCosminexus Client AIX 11-00 - 11-00-02
  • uCosminexus Client Windows 09-70 - 09-70-03
  • uCosminexus Client Windows(x64) 09-70 - 09-87
  • uCosminexus Client Linux 09-70 - 09-87-01
  • uCosminexus Client AIX 09-70 - 09-70-02
  • uCosminexus Developer Windows(x64) 11-00 - 11-70
  • uCosminexus Developer Linux 11-00 - 11-70
  • uCosminexus Developer AIX 11-00 - 11-00-02
  • uCosminexus Developer Windows 09-70 - 09-70-03
  • uCosminexus Developer Windows(x64) 09-70 - 09-87
  • uCosminexus Developer Linux 09-70 - 09-87-01
  • uCosminexus Developer AIX 09-70 - 09-70-02
  • uCosminexus Operator for Service Platform Windows 09-70 - 09-70-03
  • uCosminexus Operator for Service Platform Windows(x64) 09-70 - 09-87
  • uCosminexus Operator for Service Platform Linux 09-70 - 09-87-01
  • uCosminexus Operator for Service Platform AIX 09-70 - 09-70-02
  • uCosminexus Primary Server Base Windows(x64) 11-00 - 11-70
  • uCosminexus Primary Server Base Linux 11-00 - 11-70
  • uCosminexus Primary Server Base AIX 11-00 - 11-00-02
  • uCosminexus Primary Server Base Windows 09-70 - 09-70-03
  • uCosminexus Primary Server Base Windows(x64) 09-70 - 09-87
  • uCosminexus Primary Server Base Linux 09-70 - 09-87-01
  • uCosminexus Primary Server Base AIX 09-70 - 09-70-02
  • uCosminexus Primary Server Base(64) Windows(x64) 11-00 - 11-70
  • uCosminexus Primary Server Base(64) Linux 11-00 - 11-70
  • uCosminexus Primary Server Base(64) AIX 11-00 - 11-00-02
  • uCosminexus Primary Server Base(64) Windows 09-70 - 09-70-03
  • uCosminexus Primary Server Base(64) Windows(x64) 09-70 - 09-87
  • uCosminexus Primary Server Base(64) Linux 09-70 - 09-87-01
  • uCosminexus Primary Server Base(64) AIX 09-70 - 09-70-02
  • uCosminexus Service Architect Windows(x64) 11-00 - 11-70
  • uCosminexus Service Architect Linux 11-00 - 11-70
  • uCosminexus Service Architect AIX 11-00 - 11-00-02
  • uCosminexus Service Architect Windows 09-70 - 09-70-03
  • uCosminexus Service Architect Windows(x64) 09-70 - 09-87
  • uCosminexus Service Architect Linux 09-70 - 09-87-01
  • uCosminexus Service Architect AIX 09-70 - 09-70-02
  • uCosminexus Service Platform Windows(x64) 11-00 - 11-70
  • uCosminexus Service Platform Linux 11-00 - 11-70
  • uCosminexus Service Platform AIX 11-00 - 11-00-02
  • uCosminexus Service Platform Windows 09-70 - 09-70-03
  • uCosminexus Service Platform Windows(x64) 09-70 - 09-87
  • uCosminexus Service Platform Linux 09-70 - 09-87-01
  • uCosminexus Service Platform AIX 09-70 - 09-70-02
  • uCosminexus Service Platform(64) Windows(x64) 11-00 - 11-70
  • uCosminexus Service Platform(64) Linux 11-00 - 11-70
  • uCosminexus Service Platform(64) AIX 11-00 - 11-00-02
  • uCosminexus Service Platform(64) Windows 09-70 - 09-70-03
  • uCosminexus Service Platform(64) Windows(x64) 09-70 - 09-87
  • uCosminexus Service Platform(64) Linux 09-70 - 09-87-01
  • uCosminexus Service Platform(64) AIX 09-70 - 09-70-02

Please refer to Vendor Information for more details.
Impact

Regarding the impact of the vulnerability, please refer to the vendor advisory.
Solution

Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action.
Vendor Information

Hitachi, Ltd
CWE (What is CWE?)

CVE (What is CVE?)

  1. CVE-2026-41254
  2. CVE-2026-47057
  3. CVE-2026-47063
References

Revision History

  • [2026/10/15]
      Web page was published

Date Public2026/10/14
Date First Published2026/10/15
Date Last Updated2026/10/15