What’s Vulnerable › Vulnerabilities

CVE-2007-4760

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-09-08 · updated 2026-06-16
• Weakness: CWE-79

Description

The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as CVE-2007-3503.

Affected products

• Hitachi Ucosminexus Application Server Enterprise: 07_00, 07_00_01, 07_00_02, 07_00_03, 07_10, 07_10_01 (+2)
• Hitachi Ucosminexus Application Server Standard: 07_00, 07_00_01, 07_00_02, 07_00_03, 07_10, 7_10_01 (+2)
• Hitachi Ucosminexus Developer Standard: 07_00, 07_00_01, 07_00_02, 07_00_03, 07_10, 07_10_01 (+3)
• Hitachi Ucosminexus Service Platform: 07_00, 07_00_01, 07_00_02, 07_00_03, 07_10, 07_10_01 (+2)

References

• http://secunia.com/advisories/26671
• http://www.hitachi-support.com/security_e/vuls_e/HS07-027_e/index-e.html
• http://www.securityfocus.com/bid/25518
• http://www.vupen.com/english/advisories/2007/3033
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36393
• http://secunia.com/advisories/26671
• http://www.hitachi-support.com/security_e/vuls_e/HS07-027_e/index-e.html
• http://www.securityfocus.com/bid/25518
• http://www.vupen.com/english/advisories/2007/3033
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36393

Get alerted when CVE-2007-4760 or the next vulnerability affects your stack