Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-20-/D, and uCosminexus Collaboration Portal and Forum/File Sharing before 06-20-/C, allow remote attackers to execute malicious scripts via unknown vectors (aka HS06-014-01).
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cosminexus_collaboration_portal | Hitachi | * | 06_10_b (including) |
| Cosminexus_collaboration_portal | Hitachi | 6.2 (including) | 6.2 (including) |
| Cosminexus_collaboration_portal | Hitachi | 06_00 (including) | 06_00 (including) |
| Groupmax_collaboration_portal | Hitachi | * | 07_10_b (including) |
| Groupmax_collaboration_portal | Hitachi | 7.2 (including) | 7.2 (including) |
| Groupmax_collaboration_portal | Hitachi | 07_00 (including) | 07_00 (including) |
| Groupmax_collaboration_web_client | Hitachi | * | 07_10_a (including) |
| Groupmax_collaboration_web_client | Hitachi | 7.2 (including) | 7.2 (including) |
| Groupmax_collaboration_web_client | Hitachi | 07_00 (including) | 07_00 (including) |
References
- http://secunia.com/advisories/20926
- http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/01-e.html
- http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/index-e.html
- http://www.securityfocus.com/bid/18830
- http://www.vupen.com/english/advisories/2006/2665
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27605
- http://secunia.com/advisories/20926
- http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/01-e.html
- http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/index-e.html
- http://www.securityfocus.com/bid/18830
- http://www.vupen.com/english/advisories/2006/2665
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27605