TI-2007-01778 Aliases CVE-2007-1854 GHSA-r8rm-5p22-vwg9

Unspecified vulnerability in Hitachi Cosminexus Component Container 07-00 through…

LOW 25Published 2007-04-03 · Updated 2024-08-07

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: Partial · None · None
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Unspecified vulnerability in Hitachi Cosminexus Component Container 07-00 through 07-00-10, and 07-10 through 07-10-03, as used in uCosminexus Application Server Enterprise and Standard; uCosminexus Service Platform; uCosminexus Developer Standard and Professional; uCosminexus Service Architect; Electronic Form Workflow Standard Set, Professional Library Set, and Developer Client Set; and uCosminexus ERP Integrator, does not properly manage session information, which has an unspecified impact related to "unintended other requests."

Why it matters now

EPSS 0.01274 70th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 20

CPE	Versions	Role	Vendor
cpe:2.3:a:hitachi:cosminexus_component_container:07_00_11::aix:::::	07_00_11	Vulnerable	Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_00_11::hp-ux_ipf:::::	07_00_11	Vulnerable	Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_00_11::linux:::::	07_00_11	Vulnerable	Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_00_11::windows:::::	07_00_11	Vulnerable	Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04::aix:::::	07_10_04	Vulnerable	Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04::hp-ux:::::	07_10_04	Vulnerable	Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04::hp-ux_ipf:::::	07_10_04	Vulnerable	Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04::linux:::::	07_10_04	Vulnerable	Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04::linux_ipf:::::	07_10_04	Vulnerable	Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04::windows:::::	07_10_04	Vulnerable	Hitachi

cpe:2.3:a:hitachi:cosminexus_component_container:07_00_11:*:aix:*:*:*:*:* Versions 07_00_11 Vulnerable ·Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_00_11:*:hp-ux_ipf:*:*:*:*:* Versions 07_00_11 Vulnerable ·Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_00_11:*:linux:*:*:*:*:* Versions 07_00_11 Vulnerable ·Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_00_11:*:windows:*:*:*:*:* Versions 07_00_11 Vulnerable ·Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04:*:aix:*:*:*:*:* Versions 07_10_04 Vulnerable ·Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04:*:hp-ux:*:*:*:*:* Versions 07_10_04 Vulnerable ·Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04:*:hp-ux_ipf:*:*:*:*:* Versions 07_10_04 Vulnerable ·Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04:*:linux:*:*:*:*:* Versions 07_10_04 Vulnerable ·Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04:*:linux_ipf:*:*:*:*:* Versions 07_10_04 Vulnerable ·Hitachi
cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04:*:windows:*:*:*:*:* Versions 07_10_04 Vulnerable ·Hitachi

Show 10 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:a:hitachi:electronic_form_workflow:::developer_client_set:::::*	all versions	Vulnerable	Hitachi
cpe:2.3:a:hitachi:electronic_form_workflow:::professional_library_set:::::*	all versions	Vulnerable	Hitachi
cpe:2.3:a:hitachi:electronic_form_workflow:::standard_set:::::*	all versions	Vulnerable	Hitachi
cpe:2.3:a:hitachi:ucosminexus_application_server:::enterprise:::::*	all versions	Vulnerable	Hitachi
cpe:2.3:a:hitachi:ucosminexus_application_server:::standard:::::*	all versions	Vulnerable	Hitachi
cpe:2.3:a:hitachi:ucosminexus_developer:::professional:::::*	all versions	Vulnerable	Hitachi
cpe:2.3:a:hitachi:ucosminexus_developer:::standard:::::*	all versions	Vulnerable	Hitachi
cpe:2.3:a:hitachi:ucosminexus_erp_integrator::::::::	all versions	Vulnerable	Hitachi
cpe:2.3:a:hitachi:ucosminexus_service_architect::::::::	all versions	Vulnerable	Hitachi
cpe:2.3:a:hitachi:ucosminexus_service_platform::::::::	all versions	Vulnerable	Hitachi

cpe:2.3:a:hitachi:electronic_form_workflow:*:*:developer_client_set:*:*:*:*:* Versions all versions Vulnerable ·Hitachi
cpe:2.3:a:hitachi:electronic_form_workflow:*:*:professional_library_set:*:*:*:*:* Versions all versions Vulnerable ·Hitachi
cpe:2.3:a:hitachi:electronic_form_workflow:*:*:standard_set:*:*:*:*:* Versions all versions Vulnerable ·Hitachi
cpe:2.3:a:hitachi:ucosminexus_application_server:*:*:enterprise:*:*:*:*:* Versions all versions Vulnerable ·Hitachi
cpe:2.3:a:hitachi:ucosminexus_application_server:*:*:standard:*:*:*:*:* Versions all versions Vulnerable ·Hitachi
cpe:2.3:a:hitachi:ucosminexus_developer:*:*:professional:*:*:*:*:* Versions all versions Vulnerable ·Hitachi
cpe:2.3:a:hitachi:ucosminexus_developer:*:*:standard:*:*:*:*:* Versions all versions Vulnerable ·Hitachi
cpe:2.3:a:hitachi:ucosminexus_erp_integrator:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Hitachi
cpe:2.3:a:hitachi:ucosminexus_service_architect:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Hitachi
cpe:2.3:a:hitachi:ucosminexus_service_platform:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Hitachi

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2007-1854
2026-10-03 Alias added: GHSA-r8rm-5p22-vwg9

References

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences