What’s Vulnerable › Vulnerabilities

CVE-2007-4563

• Severity: medium (CVSS 4.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-08-28 · updated 2026-06-16
• Weakness: CWE-264

Description

Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.

Affected products

• Hitachi Cosminexus Application Server Enterprise: 06_50, 06_50_b, 06_50_c, 06_50_c_1, 06_50_e_1, 06_50_f (+3)
• Hitachi Cosminexus Application Server Standard: 06_50, 06_50_b, 06_50_c, 06_50_c_1, 06_50_e_1, 06_50_f (+3)
• Hitachi Electronic Form Workflow - Standard Set: 07_00, 07_00_b
• Hitachi Electronic Form Workflow -Professional Library Set: 07_00, 07_00_b
• Hitachi Ucosminexus Application Server Enterprise: 06_70, 06_70_a, 06_70_b, 06_70_b_1, 06_70_d, 06_70_g (+13)
• Hitachi Ucosminexus Application Server Standard: 06_70, 06_70_a, 06_70_b, 06_70_b_1, 06_70_c, 06_70_d (+10)
• Hitachi Ucosminexus Service Platform: 07_00, 07_10

References

• http://osvdb.org/37854
• http://secunia.com/advisories/26589
• http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html
• http://www.securityfocus.com/bid/25434
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36245
• http://osvdb.org/37854
• http://secunia.com/advisories/26589
• http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html
• http://www.securityfocus.com/bid/25434
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36245

Get alerted when CVE-2007-4563 or the next vulnerability affects your stack