CVE-2014-4189

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-06-17 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Hitachi Jp1/Performance Management-Manager Web Option: 07-00, 07-54
Hitachi Tuning Manager: 6.0.0, 7.1.0, 7.6.1, 7.6.1-05, 8.0.0, 8.0.0-03

References

http://secunia.com/advisories/58528
http://secunia.com/advisories/58899
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-013/index.html
http://www.securityfocus.com/bid/68015
http://secunia.com/advisories/58528
http://secunia.com/advisories/58899
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-013/index.html
http://www.securityfocus.com/bid/68015

Get alerted when CVE-2014-4189 or the next vulnerability affects your stack