CVE:CVE-2007-5809
CNNVD:CNNVD-200711-068
Hitachi Web Server 01-00 至 03-10版本中存在跨站脚本攻击漏洞,当在某些Cosminexus产品中运行时, 远程攻击者可以借助未明HTTP请求注入任意web脚本或HTML，且该请求能触发服务状态页的产生。
solution:Upgrade hitachi cosminexus_application_server_enterprise to a higher version than 06_51_j,and avoid the version (,06_51_j]; Upgrade hitachi cosminexus_application_server_standard to a higher version than 06_51_j,and avoid the version (,06_51_j]; Upgrade hitachi cosminexus_developer_light_version_6 to a higher version than 06_51_j,and avoid the version (,06_51_j]; Upgrade hitachi cosminexus_developer_professional_version_6 to a higher version than 06_51_j,and avoid the version (,06_51_j]; Upgrade hitachi cosminexus_developer_standard_version_6 to a higher version than 06_51_j,and avoid the version (,06_51_j]; Upgrade hitachi cosminexus_server to a higher version than 04_01,and avoid the version (,04_01]; Upgrade hitachi ucosminexus_application_server_enterprise to a higher version than 07_50_01,and avoid the version (,07_50_01]; Upgrade hitachi ucosminexus_application_server_standard to a higher version than 07_50_01,and avoid the version (,07_50_01]; Upgrade hitachi ucosminexus_developer_light to a higher version than 06_71_d,and avoid the version (,06_71_d]; Upgrade hitachi ucosminexus_developer_professional to a higher version than 07_50_01,and avoid the version (,07_50_01]; Upgrade hitachi ucosminexus_developer_standard to a higher version than 07_50_01,and avoid the version (,07_50_01]; Upgrade hitachi ucosminexus_service_architect to a higher version than 07_50_01,and avoid the version (,07_50_01]; Upgrade hitachi ucosminexus_service_platform to a higher version than 07_50_01,and avoid the version (,07_50_01]; Upgrade hitachi web_server to a higher version than 01_00,01_01,01_01_d,01_02_d,01_02_e,02_00,02_00_a,02_02,02_04_b,02_06_a,03_00,03_00_01,and avoid the version 01_00,01_01,01_01_d,01_02_d,01_02_e,02_00,02_00_a,02_02,02_04_b,02_06_a,03_00,03_00_01