CVE-2006-3574

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-07-13 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-20-/D, and uCosminexus Collaboration Portal and Forum/File Sharing before 06-20-/C, allow remote attackers to "execute malicious scripts" via unknown vectors (aka HS06-014-01).

Affected products

Hitachi Cosminexus Collaboration Portal: through 06_10_b; 6.2, 06_00
Hitachi Groupmax Collaboration Portal: through 07_10_b; 7.2, 07_00
Hitachi Groupmax Collaboration Web Client: through 07_10_a; 7.2, 07_00

References

http://secunia.com/advisories/20926
http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/01-e.html
http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/index-e.html
http://www.securityfocus.com/bid/18830
http://www.vupen.com/english/advisories/2006/2665
https://exchange.xforce.ibmcloud.com/vulnerabilities/27605
http://secunia.com/advisories/20926
http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/01-e.html
http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/index-e.html
http://www.securityfocus.com/bid/18830
http://www.vupen.com/english/advisories/2006/2665
https://exchange.xforce.ibmcloud.com/vulnerabilities/27605

Get alerted when CVE-2006-3574 or the next vulnerability affects your stack