What’s Vulnerable › Vulnerabilities

CVE-2007-0514

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-01-26 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.

Affected products

• Hitachi Cosminexus Application Server: 6
• Hitachi Cosminexus Application Server Version 5: all versions
• Hitachi Cosminexus Developer Light Version 6: all versions
• Hitachi Cosminexus Developer Professional Version 6: all versions
• Hitachi Cosminexus Developer Standard Version 6: all versions
• Hitachi Cosminexus Developer Version 5: all versions
• Hitachi Cosminexus Server - Enterprise Edition: all versions
• Hitachi Cosminexus Server - Standard Edition: all versions
• Hitachi Cosminexus Server - Standard Edition Version 4: all versions
• Hitachi Cosminexus Server - Web Edition: all versions
• Hitachi Cosminexus Server - Web Edition Version 4: all versions
• Hitachi Web Server: all versions
• Hitachi Ucosminexus Application Server Enterprise: all versions
• Hitachi Ucosminexus Application Server Smart Edition: all versions
• Hitachi Ucosminexus Application Server Standard: all versions
• Hitachi Ucosminexus Developer Light: all versions
• Hitachi Ucosminexus Developer Standard: all versions
• Hitachi Ucosminexus Service Architect: all versions
• Hitachi Ucosminexus Service Platform: all versions

References

• http://osvdb.org/32997
• http://osvdb.org/32998
• http://secunia.com/advisories/23843
• http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html
• http://www.vupen.com/english/advisories/2007/0326
• http://osvdb.org/32997
• http://osvdb.org/32998
• http://secunia.com/advisories/23843
• http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html
• http://www.vupen.com/english/advisories/2007/0326

Get alerted when CVE-2007-0514 or the next vulnerability affects your stack