What’s Vulnerable › Vulnerabilities

CVE-2007-5809

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-11-05 · updated 2026-06-16
• Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.

Affected products

• Hitachi Cosminexus Application Server Enterprise: through 06_51_j
• Hitachi Cosminexus Application Server Standard: through 06_51_j
• Hitachi Cosminexus Developer Light Version 6: through 06_51_j
• Hitachi Cosminexus Developer Professional Version 6: through 06_51_j
• Hitachi Cosminexus Developer Standard Version 6: through 06_51_j
• Hitachi Cosminexus Server: through 04_01
• Hitachi Ucosminexus Application Server Enterprise: through 07_50_01
• Hitachi Ucosminexus Application Server Standard: through 07_50_01
• Hitachi Ucosminexus Developer Light: through 06_71_d
• Hitachi Ucosminexus Developer Professional: through 07_50_01
• Hitachi Ucosminexus Developer Standard: through 07_50_01
• Hitachi Ucosminexus Service Architect: through 07_50_01
• Hitachi Ucosminexus Service Platform: through 07_50_01
• Hitachi Web Server: 01_00, 01_01, 01_01_d, 01_02_d, 01_02_e, 02_00 (+6)

References

• http://osvdb.org/42027
• http://secunia.com/advisories/27421
• http://www.hitachi-support.com/security_e/vuls_e/HS07-035_e/index-e.html
• http://www.securityfocus.com/bid/26271
• http://www.vupen.com/english/advisories/2007/3666
• http://osvdb.org/42027
• http://secunia.com/advisories/27421
• http://www.hitachi-support.com/security_e/vuls_e/HS07-035_e/index-e.html
• http://www.securityfocus.com/bid/26271
• http://www.vupen.com/english/advisories/2007/3666

Get alerted when CVE-2007-5809 or the next vulnerability affects your stack