What’s Vulnerable › Vulnerabilities

CVE-2007-1854

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-04-03 · updated 2026-06-16

Description

Unspecified vulnerability in Hitachi Cosminexus Component Container 07-00 through 07-00-10, and 07-10 through 07-10-03, as used in uCosminexus Application Server Enterprise and Standard; uCosminexus Service Platform; uCosminexus Developer Standard and Professional; uCosminexus Service Architect; Electronic Form Workflow Standard Set, Professional Library Set, and Developer Client Set; and uCosminexus ERP Integrator, does not properly manage session information, which has an unspecified impact related to "unintended other requests."

Affected products

• Hitachi Cosminexus Component Container: 07_00_11, 07_10_04
• Hitachi Electronic Form Workflow: all versions
• Hitachi Ucosminexus Application Server: all versions
• Hitachi Ucosminexus Developer: all versions
• Hitachi Ucosminexus Erp Integrator: all versions
• Hitachi Ucosminexus Service Architect: all versions
• Hitachi Ucosminexus Service Platform: all versions

References

• http://osvdb.org/34768
• http://secunia.com/advisories/24683
• http://www.hitachi-support.com/security_e/vuls_e/HS07-006_e/index-e.html
• http://www.securityfocus.com/bid/23213
• http://www.vupen.com/english/advisories/2007/1170
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33318
• http://osvdb.org/34768
• http://secunia.com/advisories/24683
• http://www.hitachi-support.com/security_e/vuls_e/HS07-006_e/index-e.html
• http://www.securityfocus.com/bid/23213
• http://www.vupen.com/english/advisories/2007/1170
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33318

Get alerted when CVE-2007-1854 or the next vulnerability affects your stack