CVE-2007-3623

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-09 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replication Monitor, and GlobalLink Availability Manager before 20070528 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.

Affected products

Hitachi Jp1-Hicommand Device Manager: 02_30, 05_00, 05_10, 05_50
Hitachi Jp1-Hicommand Global Link Availability Manager: 05_00
Hitachi Jp1-Hicommand Replication Monitor: 04_00, 05_00, 05_50
Hitachi Jp1-Hicommand Tiered Storage Manager: 04_00, 04_30, 05_00, 05_50

References

http://osvdb.org/37848
http://osvdb.org/37849
http://secunia.com/advisories/25973
http://www.hitachi-support.com/security_e/vuls_e/HS07-017_e/index-e.html
http://www.securityfocus.com/bid/24797
http://www.vupen.com/english/advisories/2007/2457
https://exchange.xforce.ibmcloud.com/vulnerabilities/35286
http://osvdb.org/37848
http://osvdb.org/37849
http://secunia.com/advisories/25973
http://www.hitachi-support.com/security_e/vuls_e/HS07-017_e/index-e.html
http://www.securityfocus.com/bid/24797

Get alerted when CVE-2007-3623 or the next vulnerability affects your stack