Vendor CVEs

Hitachi

All CVEs

357 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-2622	Hitachi MAIN Computer	Low	0.18	2.7	0.00	Nov 1, 2023	Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint. The low privilege client is then allowed to read arbitrary files that they do not have authorization to read.
CVE-2021-34685	Hitachi Vantara Pentaho	Low	0.18	2.7	0.02	Nov 8, 2021	UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, which allows an authenticated user to upload various files of different file types. Specifically, a .jsp file is not allowed, but a .jsp. file is allowed (and…
CVE-2005-0356	Microsoft Windows 2000		0.10	—	0.83	May 31, 2005	Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later…
CVE-2005-3164	Apache Tomcat		0.01	—	0.07	Oct 6, 2005	The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly handle when a connection is broken before request body data is sent in a POST request, which can lead to an…
CVE-2003-0564	Hitachi Groupmax Mail Security Option		0.01	—	0.09	Dec 1, 2003	Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions (S/MIME) protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected…
CVE-2025-7386	Hitachi Storage Navigator	Med	0.00	6.8	0.00	Jun 29, 2026	Information exposure vulnerability in Hitachi Storage Navigator. This issue affects Hitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 5100H, 5200H, 5500H, 5600H, VX8: before DKCMAIN Ver. 90-09-24-00/00, SVP Ver. 90-09-24/00, before DKCMAIN Ver. 90-08-86-00/00, SVP Ver.…
CVE-2025-2902	Hitachi Virtual Storage Platform	Hig	0.00	8.3	0.00	Jun 29, 2026	Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform. This issue affects Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H: before DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00; Hitachi…
CVE-2025-0824	Hitachi Virtual Storage Platform One Block	Low	0.00	3.7	0.00	Jun 29, 2026	Lack of validation for firmware update in Hitachi Hitachi Virtual Storage Platform One Block 23, 24, 26, 28. This issue affects Hitachi Virtual Storage Platform One Block 23, 24, 26, 28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00.
CVE-2021-4266	Webdetails cpf	Low	0.00	3.5	0.01	Dec 21, 2022	A vulnerability classified as problematic has been found in Webdetails cpf up to 9.5.0.0-80. Affected is an unknown function of the file core/src/main/java/pt/webdetails/cpf/packager/DependenciesPackage.java. The manipulation of the argument baseUrl leads to cross site…
CVE-2015-1565	Hitachi Device Manager		0.00	—	0.01	Feb 9, 2015	Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite,…
CVE-2014-4189	Hitachi Tuning Manager		0.00	—	0.01	Jun 17, 2014	Cross-site scripting (XSS) vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-4188	Hitachi Tuning Manager		0.00	—	0.01	Jun 17, 2014	Cross-site request forgery (CSRF) vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to hijack the authentication of unspecified victims via unknown…
CVE-2013-4697	Hitachi It Operations Director		0.00	—	0.02	Jul 31, 2013	Multiple unspecified vulnerabilities in Hitachi JP1/IT Desktop Management - Manager 09-50 through 09-50-03, 09-51 through 09-51-05, 10-00 through 10-00-02, and 10-01 through 10-01-02; Hitachi Job Management Partner 1/IT Desktop Management - Manager 09-50 through 09-50-03 and…
CVE-2011-5217	Hitachi Jp1\/serverconductor\/deploymentmanager		0.00	—	0.03	Oct 25, 2012	Directory traversal vulnerability in the PXE Mtftp service in Hitachi JP1/ServerConductor/DeploymentManager before 08-55 Japanese and before 08-51 English allows remote attackers to read arbitrary files via unknown vectors.
CVE-2012-5001	Hitachi Jp1\/cm2\/network Node Manager		0.00	—	0.03	Sep 19, 2012	Multiple unspecified vulnerabilities in Hitachi JP1/Cm2/Network Node Manager i before 09-50-03 allow remote attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors.
CVE-2012-4276	Hitachi It Operations Director		0.00	—	0.01	Aug 13, 2012	Unspecified vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 before 03-00-08 allows attackers to cause a denial of service via unknown attack vectors.
CVE-2012-4275	Hitachi It Operations Director		0.00	—	0.01	Aug 13, 2012	Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 before 03-00-08 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-4274	Hitachi Cobol Gui Option		0.00	—	0.03	Aug 13, 2012	Unspecified vulnerability in Hitachi Cobol GUI Option 06-00, 06-01 through 06-01-/A, 07-00, 07-01 before 07-01-/B, and 08-00 before 08-00-/B and Cobol GUI Option Server 07-00, 07-01 before 07-01-/B, and 08-00 before 08-00-/B allows remote attackers to execute arbitrary code via…
CVE-2012-0919	Hitachi It Operations Director		0.00	—	0.01	Jan 24, 2012	Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 through 03-00-04, and possibly other versions before 03-00-06, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-0918	Hitachi Cobol2002 Net Developer		0.00	—	0.04	Jan 24, 2012	Unspecified vulnerability in Hitachi COBOL2002 Net Developer, Net Server Suite, and Net Client Suite 01-00, 01-01 through 01-01-/D, 01-02 through 01-02-/F, 01-03 through 01-03-/F, 02-00 through 02-00-/D, 02-01 through 02-01-/C, and possibly other versions before 02-01-/D allows…
CVE-2012-0917	Hitachi It Operations Analyzer		0.00	—	0.01	Jan 24, 2012	Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Analyzer 02-01, 02-51 through 02-51-01, and 02-53 through 02-53-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2010-4773	Hitachi Eur Form Client		0.00	—	0.05	Mar 23, 2011	Unspecified vulnerability in Hitachi EUR Form Client before 05-10 -/D 2010.11.15 and 05-10-CA (* 2) 2010.11.15; Hitachi EUR Form Service before 05-10 -/D 2010.11.15; and uCosminexus EUR Form Service before 07-60 -/D 2010.11.15 on Windows, before 05-10 -/D 2010.11.15 and 07-50…
CVE-2010-2625	Hitachi Jp1\/serverconductor\/deploymentmanager		0.00	—	0.01	Jul 2, 2010	Unspecified vulnerability in the Client Service for DPM in Hitachi ServerConductor / Deployment Manager 01-00, 01-01, and 06-00 through 06-00-/A; ServerConductor / Deployment Manager Standard Edition and Enterprise Edition 07-50 through 07-55, and 07-57 through 07-59; and…
CVE-2009-4777	Hitachi Jp1 Integrated Management Service Support		0.00	—	0.01	Apr 21, 2010	Unspecified vulnerability in multiple versions of Hitachi JP1/Automatic Job Management System 2 - View, JP1/Integrated Management - View, and JP1/Cm2/SNMP System Observer, allows remote attackers to cause a denial of service ("abnormal" termination) via vectors related to the…
CVE-2009-4776	Hitachi Processing Kit For XML		0.00	—	0.03	Apr 21, 2010	Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact…
CVE-2009-3172	Hitachi Groupmax Groupware Server		0.00	—	0.01	Sep 11, 2009	Unspecified vulnerability in Hitachi Groupmax Groupware Server 07-00 through 07-50-/A, Groupmax Server Set 03-00 through 06-52, Groupware Server Set 03-00 through 06-52, and Scheduler Server Set 03-00 through 06-52 has unknown impact and attack vectors related to invalid access…
CVE-2009-3169	Hitachi Jp1 File Transmission Server		0.00	—	0.04	Sep 11, 2009	Multiple unspecified vulnerabilities in Hitachi JP1/File Transmission Server/FTP before 09-00 allow remote attackers to execute arbitrary code via unknown attack vectors.
CVE-2008-5719	Hitachi Groupmax Web Workflow SDK Set For Active Server Pages		0.00	—	0.01	Dec 26, 2008	Cross-site scripting (XSS) vulnerability in Hitachi Groupmax Web Workflow SDK Set for Active Server Pages before 06-52-/C and Hitachi Groupmax Workflow - Development Kit for Active Server Pages before 06-52-/A allows remote attackers to inject arbitrary web script or HTML via…
CVE-2008-5717	Hitachi Jp1 Integrated Management Service Support		0.00	—	0.02	Dec 26, 2008	Cross-site scripting (XSS) vulnerability in Hitachi JP1/Integrated Management - Service Support 08-10 through 08-10-05, 08-11 through 08-11-03, and 08-50 through 08-50-03 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-2172	Hitachi GR routers		0.00	—	0.02	May 13, 2008	Unspecified vulnerability in Hitachi GR routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372.
CVE-2008-0875	Hitachi Eur Print Manager		0.00	—	0.01	Feb 21, 2008	Unspecified vulnerability in Hitachi EUR Print Manager, and related Client and Local Server products, 05-06 through 05-06-/B and 05-08 allows remote attackers to cause a denial of service (service hang or termination) via unspecified vectors related to "unexpected data."
CVE-2008-0876	Hitachi Sewb3 Mi Platform		0.00	—	0.01	Feb 21, 2008	Unspecified vulnerability in the SEWB3 messaging service in Hitachi SEWB3/PLATFORM and SEWB3/MI-PLATFORM 01-00 through 02-14-/A allows remote attackers to cause a denial of service (service outage) via "invalid data."
CVE-2007-6145	Hitachi Jp1 File Transmission Server		0.00	—	0.02	Nov 27, 2007	Unspecified vulnerability in Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-01 allows remote attackers to bypass authentication and "view files" via unspecified vectors.
CVE-2007-6146	Hitachi Jp1 File Transmission Server		0.00	—	0.02	Nov 27, 2007	Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-02 on Windows might allow remote attackers to cause a denial of service (service stop) via a "specific file" argument to an FTP command.
CVE-2007-5808	Hitachi Groupmax Collaboration Portal		0.00	—	0.01	Nov 5, 2007	Unspecified vulnerability in the Groupmax Collaboration - Schedule component in Hitachi Groupmax Collaboration Portal 07-30 through 07-30-/F and 07-32 through 07-32-/C, uCosminexus Collaboration Portal 06-30 through 06-30-/F and 06-32 through 06-32-/C, and Groupmax Collaboration…
CVE-2007-5810	Hitachi Web Server		0.00	—	0.01	Nov 5, 2007	Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.
CVE-2007-5809	Hitachi Web Server		0.00	—	0.01	Nov 5, 2007	Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
CVE-2007-5281	Hitachi Cosminexus Developer's Kit for Java		0.00	—	0.02	Oct 9, 2007	The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake…
CVE-2007-5282	Hitachi Cosminexus Agent		0.00	—	0.01	Oct 9, 2007	Hitachi Cosminexus Agent 03-00 through 03-05, and Cosminexus Library Standard and Web Edition 04-00 and 04-01, might allow remote attackers to cause a denial of service (agent process crash) via invalid data from clients other than Cosminexus Manager.
CVE-2007-5283	Hitachi Tpbroker Object Transaction Monitor		0.00	—	0.01	Oct 9, 2007	The TSC Domain Manager in Hitachi TPBroker Object Transaction Monitor and Cosminexus TPBroker Object Transaction Monitor 01-00 through 03-00 might allow attackers to cause a denial of service (crash) via invalid messages.
CVE-2007-4760	Cosminexus Developer's Kit for Java		0.00	—	0.02	Sep 8, 2007	The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is…
CVE-2007-4759	Hitachi Cosminexus Developer's Kit for Java		0.00	—	0.02	Sep 8, 2007	Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service via unspecified vectors.
CVE-2007-4758	Hitachi Cosminexus Developer's Kit for Java		0.00	—	0.06	Sep 8, 2007	Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors.
CVE-2007-4720	Hitachi NNM Starter Edition Enterprise and 250		0.00	—	0.02	Sep 5, 2007	Unspecified vulnerability in the Shared Trace Service in Hitachi JP1/Cm2/Network Node Manager (NNM) 07-10 through 07-10-05, and NNM Starter Edition Enterprise and 250 08-00 through 08-10, allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2007-4564	Cosminexus Cosminexus Application Server		0.00	—	0.00	Aug 28, 2007	Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges.
CVE-2007-4562	Hitachi Cosminexus Dabroker		0.00	—	0.01	Aug 28, 2007	Unspecified vulnerability in Hitachi DABroker before 03-02-/D and Cosminexus DABroker before 02-04-/C and 03-05-/E allows remote attackers to cause a denial of service (connection prevention) by sending "data unexpectedly through a port."
CVE-2007-4563	Cosminexus Cosminexus Application Server		0.00	—	0.00	Aug 28, 2007	Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.
CVE-2007-4204	Hitachi Groupmax Collaboration Portal		0.00	—	0.01	Aug 8, 2007	Hitachi Groupmax Collaboration - Schedule, as used in Groupmax Collaboration Portal 07-32 through 07-32-/B, uCosminexus Collaboration Portal 06-32 through 06-32-/B, and Groupmax Collaboration Web Client - Mail/Schedule 07-32 through 07-32-/A, can assign schedule data to the…
CVE-2007-4123	Hitachi Groupmax Groupware Server		0.00	—	0.01	Aug 1, 2007	The Groupmax Scheduler_Facilities management tool in Hitachi Groupmax Groupware Server 07-00-/F through 07-32-/A before 20070731 does not properly manage schedule server configuration data, which might allow attackers to obtain sensitive information via unspecified vectors.
CVE-2007-4122	Hitachi Jp1 Cm2 Hierarchical Viewer		0.00	—	0.01	Aug 1, 2007	Unspecified vulnerability in Hitachi JP1/Cm2/Hierarchical Viewer (HV) 06-00 through 06-71-/B allows remote attackers to cause a denial of service (application stop and web interface outage) via certain "unexpected data."

CVE-2023-2622LowNov 1, 2023
Hitachi
MAIN Computer
risk 0.18cvss 2.7epss 0.00
Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint. The low privilege client is then allowed to read arbitrary files that they do not have authorization to read.
CVE-2021-34685LowNov 8, 2021
Hitachi
Vantara Pentaho
risk 0.18cvss 2.7epss 0.02
UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, which allows an authenticated user to upload various files of different file types. Specifically, a .jsp file is not allowed, but a .jsp. file is allowed (and…
CVE-2005-0356May 31, 2005
Microsoft
Windows 2000
risk 0.10cvss —epss 0.83
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later…
CVE-2005-3164Oct 6, 2005
Apache
Tomcat
risk 0.01cvss —epss 0.07
The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly handle when a connection is broken before request body data is sent in a POST request, which can lead to an…
CVE-2003-0564Dec 1, 2003
Hitachi
Groupmax Mail Security Option
risk 0.01cvss —epss 0.09
Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions (S/MIME) protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected…
CVE-2025-7386MedJun 29, 2026
Hitachi
Storage Navigator
risk 0.00cvss 6.8epss 0.00
Information exposure vulnerability in Hitachi Storage Navigator. This issue affects Hitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 5100H, 5200H, 5500H, 5600H, VX8: before DKCMAIN Ver. 90-09-24-00/00, SVP Ver. 90-09-24/00, before DKCMAIN Ver. 90-08-86-00/00, SVP Ver.…
CVE-2025-2902HigJun 29, 2026
Hitachi
Virtual Storage Platform
risk 0.00cvss 8.3epss 0.00
Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform. This issue affects Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H: before DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00; Hitachi…
CVE-2025-0824LowJun 29, 2026
Hitachi
Virtual Storage Platform One Block
risk 0.00cvss 3.7epss 0.00
Lack of validation for firmware update in Hitachi Hitachi Virtual Storage Platform One Block 23, 24, 26, 28. This issue affects Hitachi Virtual Storage Platform One Block 23, 24, 26, 28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00.
CVE-2021-4266LowDec 21, 2022
Webdetails
cpf
risk 0.00cvss 3.5epss 0.01
A vulnerability classified as problematic has been found in Webdetails cpf up to 9.5.0.0-80. Affected is an unknown function of the file core/src/main/java/pt/webdetails/cpf/packager/DependenciesPackage.java. The manipulation of the argument baseUrl leads to cross site…
CVE-2015-1565Feb 9, 2015
Hitachi
Device Manager
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite,…
CVE-2014-4189Jun 17, 2014
Hitachi
Tuning Manager
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-4188Jun 17, 2014
Hitachi
Tuning Manager
risk 0.00cvss —epss 0.01
Cross-site request forgery (CSRF) vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to hijack the authentication of unspecified victims via unknown…
CVE-2013-4697Jul 31, 2013
Hitachi
It Operations Director
risk 0.00cvss —epss 0.02
Multiple unspecified vulnerabilities in Hitachi JP1/IT Desktop Management - Manager 09-50 through 09-50-03, 09-51 through 09-51-05, 10-00 through 10-00-02, and 10-01 through 10-01-02; Hitachi Job Management Partner 1/IT Desktop Management - Manager 09-50 through 09-50-03 and…
CVE-2011-5217Oct 25, 2012
Hitachi
Jp1\/serverconductor\/deploymentmanager
risk 0.00cvss —epss 0.03
Directory traversal vulnerability in the PXE Mtftp service in Hitachi JP1/ServerConductor/DeploymentManager before 08-55 Japanese and before 08-51 English allows remote attackers to read arbitrary files via unknown vectors.
CVE-2012-5001Sep 19, 2012
Hitachi
Jp1\/cm2\/network Node Manager
risk 0.00cvss —epss 0.03
Multiple unspecified vulnerabilities in Hitachi JP1/Cm2/Network Node Manager i before 09-50-03 allow remote attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors.
CVE-2012-4276Aug 13, 2012
Hitachi
It Operations Director
risk 0.00cvss —epss 0.01
Unspecified vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 before 03-00-08 allows attackers to cause a denial of service via unknown attack vectors.
CVE-2012-4275Aug 13, 2012
Hitachi
It Operations Director
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 before 03-00-08 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-4274Aug 13, 2012
Hitachi
Cobol Gui Option
risk 0.00cvss —epss 0.03
Unspecified vulnerability in Hitachi Cobol GUI Option 06-00, 06-01 through 06-01-/A, 07-00, 07-01 before 07-01-/B, and 08-00 before 08-00-/B and Cobol GUI Option Server 07-00, 07-01 before 07-01-/B, and 08-00 before 08-00-/B allows remote attackers to execute arbitrary code via…
CVE-2012-0919Jan 24, 2012
Hitachi
It Operations Director
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 through 03-00-04, and possibly other versions before 03-00-06, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-0918Jan 24, 2012
Hitachi
Cobol2002 Net Developer
risk 0.00cvss —epss 0.04
Unspecified vulnerability in Hitachi COBOL2002 Net Developer, Net Server Suite, and Net Client Suite 01-00, 01-01 through 01-01-/D, 01-02 through 01-02-/F, 01-03 through 01-03-/F, 02-00 through 02-00-/D, 02-01 through 02-01-/C, and possibly other versions before 02-01-/D allows…
CVE-2012-0917Jan 24, 2012
Hitachi
It Operations Analyzer
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Analyzer 02-01, 02-51 through 02-51-01, and 02-53 through 02-53-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2010-4773Mar 23, 2011
Hitachi
Eur Form Client
risk 0.00cvss —epss 0.05
Unspecified vulnerability in Hitachi EUR Form Client before 05-10 -/D 2010.11.15 and 05-10-CA (* 2) 2010.11.15; Hitachi EUR Form Service before 05-10 -/D 2010.11.15; and uCosminexus EUR Form Service before 07-60 -/D 2010.11.15 on Windows, before 05-10 -/D 2010.11.15 and 07-50…
CVE-2010-2625Jul 2, 2010
Hitachi
Jp1\/serverconductor\/deploymentmanager
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Client Service for DPM in Hitachi ServerConductor / Deployment Manager 01-00, 01-01, and 06-00 through 06-00-/A; ServerConductor / Deployment Manager Standard Edition and Enterprise Edition 07-50 through 07-55, and 07-57 through 07-59; and…
CVE-2009-4777Apr 21, 2010
Hitachi
Jp1 Integrated Management Service Support
risk 0.00cvss —epss 0.01
Unspecified vulnerability in multiple versions of Hitachi JP1/Automatic Job Management System 2 - View, JP1/Integrated Management - View, and JP1/Cm2/SNMP System Observer, allows remote attackers to cause a denial of service ("abnormal" termination) via vectors related to the…
CVE-2009-4776Apr 21, 2010
Hitachi
Processing Kit For XML
risk 0.00cvss —epss 0.03
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact…
CVE-2009-3172Sep 11, 2009
Hitachi
Groupmax Groupware Server
risk 0.00cvss —epss 0.01
Unspecified vulnerability in Hitachi Groupmax Groupware Server 07-00 through 07-50-/A, Groupmax Server Set 03-00 through 06-52, Groupware Server Set 03-00 through 06-52, and Scheduler Server Set 03-00 through 06-52 has unknown impact and attack vectors related to invalid access…
CVE-2009-3169Sep 11, 2009
Hitachi
Jp1 File Transmission Server
risk 0.00cvss —epss 0.04
Multiple unspecified vulnerabilities in Hitachi JP1/File Transmission Server/FTP before 09-00 allow remote attackers to execute arbitrary code via unknown attack vectors.
CVE-2008-5719Dec 26, 2008
Hitachi
Groupmax Web Workflow SDK Set For Active Server Pages
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in Hitachi Groupmax Web Workflow SDK Set for Active Server Pages before 06-52-/C and Hitachi Groupmax Workflow - Development Kit for Active Server Pages before 06-52-/A allows remote attackers to inject arbitrary web script or HTML via…
CVE-2008-5717Dec 26, 2008
Hitachi
Jp1 Integrated Management Service Support
risk 0.00cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in Hitachi JP1/Integrated Management - Service Support 08-10 through 08-10-05, 08-11 through 08-11-03, and 08-50 through 08-50-03 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-2172May 13, 2008
Hitachi
GR routers
risk 0.00cvss —epss 0.02
Unspecified vulnerability in Hitachi GR routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372.
CVE-2008-0875Feb 21, 2008
Hitachi
Eur Print Manager
risk 0.00cvss —epss 0.01
Unspecified vulnerability in Hitachi EUR Print Manager, and related Client and Local Server products, 05-06 through 05-06-/B and 05-08 allows remote attackers to cause a denial of service (service hang or termination) via unspecified vectors related to "unexpected data."
CVE-2008-0876Feb 21, 2008
Hitachi
Sewb3 Mi Platform
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the SEWB3 messaging service in Hitachi SEWB3/PLATFORM and SEWB3/MI-PLATFORM 01-00 through 02-14-/A allows remote attackers to cause a denial of service (service outage) via "invalid data."
CVE-2007-6145Nov 27, 2007
Hitachi
Jp1 File Transmission Server
risk 0.00cvss —epss 0.02
Unspecified vulnerability in Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-01 allows remote attackers to bypass authentication and "view files" via unspecified vectors.
CVE-2007-6146Nov 27, 2007
Hitachi
Jp1 File Transmission Server
risk 0.00cvss —epss 0.02
Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-02 on Windows might allow remote attackers to cause a denial of service (service stop) via a "specific file" argument to an FTP command.
CVE-2007-5808Nov 5, 2007
Hitachi
Groupmax Collaboration Portal
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Groupmax Collaboration - Schedule component in Hitachi Groupmax Collaboration Portal 07-30 through 07-30-/F and 07-32 through 07-32-/C, uCosminexus Collaboration Portal 06-30 through 06-30-/F and 06-32 through 06-32-/C, and Groupmax Collaboration…
CVE-2007-5810Nov 5, 2007
Hitachi
Web Server
risk 0.00cvss —epss 0.01
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.
CVE-2007-5809Nov 5, 2007
Hitachi
Web Server
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
CVE-2007-5281Oct 9, 2007
Hitachi
Cosminexus Developer's Kit for Java
risk 0.00cvss —epss 0.02
The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake…
CVE-2007-5282Oct 9, 2007
Hitachi
Cosminexus Agent
risk 0.00cvss —epss 0.01
Hitachi Cosminexus Agent 03-00 through 03-05, and Cosminexus Library Standard and Web Edition 04-00 and 04-01, might allow remote attackers to cause a denial of service (agent process crash) via invalid data from clients other than Cosminexus Manager.
CVE-2007-5283Oct 9, 2007
Hitachi
Tpbroker Object Transaction Monitor
risk 0.00cvss —epss 0.01
The TSC Domain Manager in Hitachi TPBroker Object Transaction Monitor and Cosminexus TPBroker Object Transaction Monitor 01-00 through 03-00 might allow attackers to cause a denial of service (crash) via invalid messages.
CVE-2007-4760Sep 8, 2007
Cosminexus
Developer's Kit for Java
risk 0.00cvss —epss 0.02
The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is…
CVE-2007-4759Sep 8, 2007
Hitachi
Cosminexus Developer's Kit for Java
risk 0.00cvss —epss 0.02
Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service via unspecified vectors.
CVE-2007-4758Sep 8, 2007
Hitachi
Cosminexus Developer's Kit for Java
risk 0.00cvss —epss 0.06
Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors.
CVE-2007-4720Sep 5, 2007
Hitachi
NNM Starter Edition Enterprise and 250
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Shared Trace Service in Hitachi JP1/Cm2/Network Node Manager (NNM) 07-10 through 07-10-05, and NNM Starter Edition Enterprise and 250 08-00 through 08-10, allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2007-4564Aug 28, 2007
Cosminexus
Cosminexus Application Server
risk 0.00cvss —epss 0.00
Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges.
CVE-2007-4562Aug 28, 2007
Hitachi
Cosminexus Dabroker
risk 0.00cvss —epss 0.01
Unspecified vulnerability in Hitachi DABroker before 03-02-/D and Cosminexus DABroker before 02-04-/C and 03-05-/E allows remote attackers to cause a denial of service (connection prevention) by sending "data unexpectedly through a port."
CVE-2007-4563Aug 28, 2007
Cosminexus
Cosminexus Application Server
risk 0.00cvss —epss 0.00
Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.
CVE-2007-4204Aug 8, 2007
Hitachi
Groupmax Collaboration Portal
risk 0.00cvss —epss 0.01
Hitachi Groupmax Collaboration - Schedule, as used in Groupmax Collaboration Portal 07-32 through 07-32-/B, uCosminexus Collaboration Portal 06-32 through 06-32-/B, and Groupmax Collaboration Web Client - Mail/Schedule 07-32 through 07-32-/A, can assign schedule data to the…
CVE-2007-4123Aug 1, 2007
Hitachi
Groupmax Groupware Server
risk 0.00cvss —epss 0.01
The Groupmax Scheduler_Facilities management tool in Hitachi Groupmax Groupware Server 07-00-/F through 07-32-/A before 20070731 does not properly manage schedule server configuration data, which might allow attackers to obtain sensitive information via unspecified vectors.
CVE-2007-4122Aug 1, 2007
Hitachi
Jp1 Cm2 Hierarchical Viewer
risk 0.00cvss —epss 0.01
Unspecified vulnerability in Hitachi JP1/Cm2/Hierarchical Viewer (HV) 06-00 through 06-71-/B allows remote attackers to cause a denial of service (application stop and web interface outage) via certain "unexpected data."

Page 6 of 8