Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before…
Priority MEDIUM 47Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.
Why it matters now
EPSS 0.02187 82nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 107
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* | all versions | Running on | Microsoft |
| cpe:2.3:a:hitachi:cosminexus_application_server:05_00_05_00_h:*:*:*:*:*:*:* | 05_00_05_00_h | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:05_01_05_01_k:*:*:*:*:*:*:* | 05_01_05_01_k | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:05_05_05_00_o:*:*:*:*:*:*:* | 05_05_05_00_o | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_g:*:enterprise:*:*:*:*:* | 06_00_06_00_g | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_g:*:standard:*:*:*:*:* | 06_00_06_00_g | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_02_06_02_f:*:enterprise:*:*:*:*:* | 06_02_06_02_f | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_02_06_02_f:*:standard:*:*:*:*:* | 06_02_06_02_f | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_e:*:enterprise:*:*:*:*:* | 06_50_06_50_e | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_e:*:standard:*:*:*:*:* | 06_50_06_50_e | Vulnerable | Hitachi |
- cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Versions all versions Running on ·Microsoft
- cpe:2.3:a:hitachi:cosminexus_application_server:05_00_05_00_h:*:*:*:*:*:*:* Versions 05_00_05_00_h Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:05_01_05_01_k:*:*:*:*:*:*:* Versions 05_01_05_01_k Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:05_05_05_00_o:*:*:*:*:*:*:* Versions 05_05_05_00_o Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_g:*:enterprise:*:*:*:*:* Versions 06_00_06_00_g Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_g:*:standard:*:*:*:*:* Versions 06_00_06_00_g Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_02_06_02_f:*:enterprise:*:*:*:*:* Versions 06_02_06_02_f Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_02_06_02_f:*:standard:*:*:*:*:* Versions 06_02_06_02_f Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_e:*:enterprise:*:*:*:*:* Versions 06_50_06_50_e Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_e:*:standard:*:*:*:*:* Versions 06_50_06_50_e Vulnerable ·Hitachi
Show 97 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_g:*:enterprise:*:*:*:*:* | 06_51_06_51_g | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_g:*:standard:*:*:*:*:* | 06_51_06_51_g | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_client:06_00_06_00_g:*:*:*:*:*:*:* | 06_00_06_00_g | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_client:06_02_06_02_f:*:*:*:*:*:*:* | 06_02_06_02_f | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_client:06_50_06_50_e:*:*:*:*:*:*:* | 06_50_06_50_e | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_client:06_51_06_51_g:*:*:*:*:*:*:* | 06_51_06_51_g | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_developer:05_00_05_00_h:*:*:*:*:*:*:* | 05_00_05_00_h | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_developer:05_01_05_01_k:*:*:*:*:*:*:* | 05_01_05_01_k | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_developer:05_05_05_05_o:*:*:*:*:*:*:* | 05_05_05_05_o | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_developer:06_00_06_00_g:*:light:*:*:*:*:* | 06_00_06_00_g | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_developer:06_00_06_00_g:*:professional:*:*:*:*:* | 06_00_06_00_g | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_developer:06_00_06_00_g:*:standard:*:*:*:*:* | 06_00_06_00_g | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_developer:06_02_06_02_f:*:light:*:*:*:*:* | 06_02_06_02_f | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_developer:06_02_06_02_f:*:professional:*:*:*:*:* | 06_02_06_02_f | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_developer:06_02_06_02_f:*:standard:*:*:*:*:* | 06_02_06_02_f | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_developer:06_50_06_50_e:*:light:*:*:*:*:* | 06_50_06_50_e | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_developer:06_50_06_50_e:*:professional:*:*:*:*:* | 06_50_06_50_e | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_developer:06_50_06_50_e:*:standard:*:*:*:*:* | 06_50_06_50_e | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_developer:06_51_06_51_g:*:light:*:*:*:*:* | 06_51_06_51_g | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_developer:06_51_06_51_g:*:professional:*:*:*:*:* | 06_51_06_51_g | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_developer:06_51_06_51_g:*:standard:*:*:*:*:* | 06_51_06_51_g | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_server:04_00_04_00_a:*:standard:*:*:*:*:* | 04_00_04_00_a | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_server:04_00_04_00_a:*:web:*:*:*:*:* | 04_00_04_00_a | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_server:04_01_04_01_a:*:standard:*:*:*:*:* | 04_01_04_01_a | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_server:04_01_04_01_a:*:web:*:*:*:*:* | 04_01_04_01_a | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_studio:04_00_04_00_a:*:standard:*:*:*:*:* | 04_00_04_00_a | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_studio:04_00_04_00_a:*:web:*:*:*:*:* | 04_00_04_00_a | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_studio:04_01_04_01_a:*:standard:*:*:*:*:* | 04_01_04_01_a | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_studio:04_01_04_01_a:*:web:*:*:*:*:* | 04_01_04_01_a | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_studio:05_05_05_05_o:*:*:*:*:*:*:* | 05_05_05_05_o | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_a:*:enterprise:*:*:*:*:* | 06_70_06_70_a | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_a:*:standard:*:*:*:*:* | 06_70_06_70_a | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_b:*:enterprise:*:*:*:*:* | 06_70_06_70_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_b:*:standard:*:*:*:*:* | 06_70_06_70_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:06_71_06_71_b:*:enterprise:*:*:*:*:* | 06_71_06_71_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:06_71_06_71_b:*:standard:*:*:*:*:* | 06_71_06_71_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_20:*:enterprise:*:*:*:*:* | 07_00_07_20 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_20:*:standard:*:*:*:*:* | 07_00_07_20 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_client:06_70_06_70_b:*:*:*:*:*:*:* | 06_70_06_70_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_client:06_71_06_71_b:*:*:*:*:*:*:* | 06_71_06_71_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_client:07_00_07_20:*:*:*:*:*:*:* | 07_00_07_20 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_developer:06_70_06_70_b:*:light:*:*:*:*:* | 06_70_06_70_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_developer:06_70_06_70_b:*:professional:*:*:*:*:* | 06_70_06_70_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_developer:06_70_06_70_b:*:standard:*:*:*:*:* | 06_70_06_70_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_developer:06_71_06_71_b:*:light:*:*:*:*:* | 06_71_06_71_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_developer:06_71_06_71_b:*:professional:*:*:*:*:* | 06_71_06_71_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_developer:06_71_06_71_b:*:standard:*:*:*:*:* | 06_71_06_71_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_operator:07_00_07_20:*:*:*:*:*:*:* | 07_00_07_20 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_service_architect:07_00_07_20:*:*:*:*:*:*:* | 07_00_07_20 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_service_platform:07_00_07_20:*:*:*:*:*:*:* | 07_00_07_20 | Vulnerable | Hitachi |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | all versions | Running on | Linux |
| cpe:2.3:a:hitachi:cosminexus_application_server:05_05_05_05_h:*:*:*:*:*:*:* | 05_05_05_05_h | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_b:*:enterprise:*:*:*:*:* | 06_00_06_00_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_b:*:standard:*:*:*:*:* | 06_00_06_00_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_d:*:*:*:*:*:*:* | 06_00_06_00_d | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_02_06_02_f:*:*:*:*:*:*:* | 06_02_06_02_f | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_b:*:enterprise:*:*:*:*:* | 06_50_06_50_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_b:*:standard:*:*:*:*:* | 06_50_06_50_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_c:*:*:*:*:*:*:* | 06_50_06_50_c | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_b:*:*:*:*:*:*:* | 06_51_06_51_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_b:*:enterprise:*:*:*:*:* | 06_51_06_51_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_b:*:standard:*:*:*:*:* | 06_51_06_51_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_c:*:*:*:*:*:*:* | 06_51_06_51_c | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_10:*:enterprise:*:*:*:*:* | 07_00_07_10 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_10:*:standard:*:*:*:*:* | 07_00_07_10 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_service_platform:07_00_07_10:*:*:*:*:*:*:* | 07_00_07_10 | Vulnerable | Hitachi |
| cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:* | all versions | Running on | Hewlett Packard Enterprise |
| cpe:2.3:a:hitachi:cosminexus_application_server:05_02_05_02_e:*:*:*:*:*:*:* | 05_02_05_02_e | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_d:*:enterprise:*:*:*:*:* | 06_00_06_00_d | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_d:*:standard:*:*:*:*:* | 06_00_06_00_d | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_e:*:enterprise:*:*:*:*:* | 06_00_06_00_e | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_e:*:standard:*:*:*:*:* | 06_00_06_00_e | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_d:*:enterprise:*:*:*:*:* | 06_50_06_50_d | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_d:*:standard:*:*:*:*:* | 06_50_06_50_d | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_h:*:enterprise:*:*:*:*:* | 06_70_06_70_h | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_h:*:standard:*:*:*:*:* | 06_70_06_70_h | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_72:*:enterprise:*:*:*:*:* | 06_70_06_72 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_72:*:standard:*:*:*:*:* | 06_70_06_72 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:07_10:*:enterprise:*:*:*:*:* | 07_10 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:07_10:*:standard:*:*:*:*:* | 07_10 | Vulnerable | Hitachi |
| cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:* | all versions | Running on | IBM |
| cpe:2.3:a:hitachi:cosminexus_application_server:05_00_05_00_r:*:*:*:*:*:*:* | 05_00_05_00_r | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:05_05_05_05_l:*:*:*:*:*:*:* | 05_05_05_05_l | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_f:*:enterprise:*:*:*:*:* | 06_50_06_50_f | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_f:*:standard:*:*:*:*:* | 06_50_06_50_f | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_d:*:enterprise:*:*:*:*:* | 06_70_06_70_d | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_d:*:standard:*:*:*:*:* | 06_70_06_70_d | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_service_platform:07_10:*:*:*:*:*:*:* | 07_10 | Vulnerable | Hitachi |
| cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:* | all versions | Running on | Sun |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_a:*:enterprise:*:*:*:*:* | 06_00_06_00_a | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_a:*:standard:*:*:*:*:* | 06_00_06_00_a | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_c:*:enterprise:*:*:*:*:* | 06_50_06_50_c | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_c:*:standard:*:*:*:*:* | 06_50_06_50_c | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_c:*:enterprise:*:*:*:*:* | 06_70_06_70_c | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_c:*:standard:*:*:*:*:* | 06_70_06_70_c | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:07_00:*:enterprise:*:*:*:*:* | 07_00 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:ucosminexus_application_server:07_00:*:standard:*:*:*:*:* | 07_00 | Vulnerable | Hitachi |
- cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_g:*:enterprise:*:*:*:*:* Versions 06_51_06_51_g Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_g:*:standard:*:*:*:*:* Versions 06_51_06_51_g Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_client:06_00_06_00_g:*:*:*:*:*:*:* Versions 06_00_06_00_g Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_client:06_02_06_02_f:*:*:*:*:*:*:* Versions 06_02_06_02_f Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_client:06_50_06_50_e:*:*:*:*:*:*:* Versions 06_50_06_50_e Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_client:06_51_06_51_g:*:*:*:*:*:*:* Versions 06_51_06_51_g Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_developer:05_00_05_00_h:*:*:*:*:*:*:* Versions 05_00_05_00_h Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_developer:05_01_05_01_k:*:*:*:*:*:*:* Versions 05_01_05_01_k Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_developer:05_05_05_05_o:*:*:*:*:*:*:* Versions 05_05_05_05_o Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_developer:06_00_06_00_g:*:light:*:*:*:*:* Versions 06_00_06_00_g Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_developer:06_00_06_00_g:*:professional:*:*:*:*:* Versions 06_00_06_00_g Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_developer:06_00_06_00_g:*:standard:*:*:*:*:* Versions 06_00_06_00_g Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_developer:06_02_06_02_f:*:light:*:*:*:*:* Versions 06_02_06_02_f Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_developer:06_02_06_02_f:*:professional:*:*:*:*:* Versions 06_02_06_02_f Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_developer:06_02_06_02_f:*:standard:*:*:*:*:* Versions 06_02_06_02_f Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_developer:06_50_06_50_e:*:light:*:*:*:*:* Versions 06_50_06_50_e Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_developer:06_50_06_50_e:*:professional:*:*:*:*:* Versions 06_50_06_50_e Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_developer:06_50_06_50_e:*:standard:*:*:*:*:* Versions 06_50_06_50_e Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_developer:06_51_06_51_g:*:light:*:*:*:*:* Versions 06_51_06_51_g Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_developer:06_51_06_51_g:*:professional:*:*:*:*:* Versions 06_51_06_51_g Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_developer:06_51_06_51_g:*:standard:*:*:*:*:* Versions 06_51_06_51_g Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_server:04_00_04_00_a:*:standard:*:*:*:*:* Versions 04_00_04_00_a Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_server:04_00_04_00_a:*:web:*:*:*:*:* Versions 04_00_04_00_a Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_server:04_01_04_01_a:*:standard:*:*:*:*:* Versions 04_01_04_01_a Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_server:04_01_04_01_a:*:web:*:*:*:*:* Versions 04_01_04_01_a Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_studio:04_00_04_00_a:*:standard:*:*:*:*:* Versions 04_00_04_00_a Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_studio:04_00_04_00_a:*:web:*:*:*:*:* Versions 04_00_04_00_a Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_studio:04_01_04_01_a:*:standard:*:*:*:*:* Versions 04_01_04_01_a Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_studio:04_01_04_01_a:*:web:*:*:*:*:* Versions 04_01_04_01_a Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_studio:05_05_05_05_o:*:*:*:*:*:*:* Versions 05_05_05_05_o Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_a:*:enterprise:*:*:*:*:* Versions 06_70_06_70_a Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_a:*:standard:*:*:*:*:* Versions 06_70_06_70_a Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_b:*:enterprise:*:*:*:*:* Versions 06_70_06_70_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_b:*:standard:*:*:*:*:* Versions 06_70_06_70_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:06_71_06_71_b:*:enterprise:*:*:*:*:* Versions 06_71_06_71_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:06_71_06_71_b:*:standard:*:*:*:*:* Versions 06_71_06_71_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_20:*:enterprise:*:*:*:*:* Versions 07_00_07_20 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_20:*:standard:*:*:*:*:* Versions 07_00_07_20 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_client:06_70_06_70_b:*:*:*:*:*:*:* Versions 06_70_06_70_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_client:06_71_06_71_b:*:*:*:*:*:*:* Versions 06_71_06_71_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_client:07_00_07_20:*:*:*:*:*:*:* Versions 07_00_07_20 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_developer:06_70_06_70_b:*:light:*:*:*:*:* Versions 06_70_06_70_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_developer:06_70_06_70_b:*:professional:*:*:*:*:* Versions 06_70_06_70_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_developer:06_70_06_70_b:*:standard:*:*:*:*:* Versions 06_70_06_70_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_developer:06_71_06_71_b:*:light:*:*:*:*:* Versions 06_71_06_71_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_developer:06_71_06_71_b:*:professional:*:*:*:*:* Versions 06_71_06_71_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_developer:06_71_06_71_b:*:standard:*:*:*:*:* Versions 06_71_06_71_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_operator:07_00_07_20:*:*:*:*:*:*:* Versions 07_00_07_20 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_service_architect:07_00_07_20:*:*:*:*:*:*:* Versions 07_00_07_20 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_service_platform:07_00_07_20:*:*:*:*:*:*:* Versions 07_00_07_20 Vulnerable ·Hitachi
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions all versions Running on ·Linux
- cpe:2.3:a:hitachi:cosminexus_application_server:05_05_05_05_h:*:*:*:*:*:*:* Versions 05_05_05_05_h Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_b:*:enterprise:*:*:*:*:* Versions 06_00_06_00_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_b:*:standard:*:*:*:*:* Versions 06_00_06_00_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_d:*:*:*:*:*:*:* Versions 06_00_06_00_d Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_02_06_02_f:*:*:*:*:*:*:* Versions 06_02_06_02_f Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_b:*:enterprise:*:*:*:*:* Versions 06_50_06_50_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_b:*:standard:*:*:*:*:* Versions 06_50_06_50_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_c:*:*:*:*:*:*:* Versions 06_50_06_50_c Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_b:*:*:*:*:*:*:* Versions 06_51_06_51_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_b:*:enterprise:*:*:*:*:* Versions 06_51_06_51_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_b:*:standard:*:*:*:*:* Versions 06_51_06_51_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_c:*:*:*:*:*:*:* Versions 06_51_06_51_c Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_10:*:enterprise:*:*:*:*:* Versions 07_00_07_10 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_10:*:standard:*:*:*:*:* Versions 07_00_07_10 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_service_platform:07_00_07_10:*:*:*:*:*:*:* Versions 07_00_07_10 Vulnerable ·Hitachi
- cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:* Versions all versions Running on ·Hewlett Packard Enterprise
- cpe:2.3:a:hitachi:cosminexus_application_server:05_02_05_02_e:*:*:*:*:*:*:* Versions 05_02_05_02_e Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_d:*:enterprise:*:*:*:*:* Versions 06_00_06_00_d Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_d:*:standard:*:*:*:*:* Versions 06_00_06_00_d Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_e:*:enterprise:*:*:*:*:* Versions 06_00_06_00_e Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_e:*:standard:*:*:*:*:* Versions 06_00_06_00_e Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_d:*:enterprise:*:*:*:*:* Versions 06_50_06_50_d Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_d:*:standard:*:*:*:*:* Versions 06_50_06_50_d Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_h:*:enterprise:*:*:*:*:* Versions 06_70_06_70_h Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_h:*:standard:*:*:*:*:* Versions 06_70_06_70_h Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_72:*:enterprise:*:*:*:*:* Versions 06_70_06_72 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_72:*:standard:*:*:*:*:* Versions 06_70_06_72 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:07_10:*:enterprise:*:*:*:*:* Versions 07_10 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:07_10:*:standard:*:*:*:*:* Versions 07_10 Vulnerable ·Hitachi
- cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:* Versions all versions Running on ·IBM
- cpe:2.3:a:hitachi:cosminexus_application_server:05_00_05_00_r:*:*:*:*:*:*:* Versions 05_00_05_00_r Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:05_05_05_05_l:*:*:*:*:*:*:* Versions 05_05_05_05_l Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_f:*:enterprise:*:*:*:*:* Versions 06_50_06_50_f Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_f:*:standard:*:*:*:*:* Versions 06_50_06_50_f Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_d:*:enterprise:*:*:*:*:* Versions 06_70_06_70_d Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_d:*:standard:*:*:*:*:* Versions 06_70_06_70_d Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_service_platform:07_10:*:*:*:*:*:*:* Versions 07_10 Vulnerable ·Hitachi
- cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:* Versions all versions Running on ·Sun
- cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_a:*:enterprise:*:*:*:*:* Versions 06_00_06_00_a Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_a:*:standard:*:*:*:*:* Versions 06_00_06_00_a Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_c:*:enterprise:*:*:*:*:* Versions 06_50_06_50_c Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_c:*:standard:*:*:*:*:* Versions 06_50_06_50_c Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_c:*:enterprise:*:*:*:*:* Versions 06_70_06_70_c Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_c:*:standard:*:*:*:*:* Versions 06_70_06_70_c Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:07_00:*:enterprise:*:*:*:*:* Versions 07_00 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:ucosminexus_application_server:07_00:*:standard:*:*:*:*:* Versions 07_00 Vulnerable ·Hitachi
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2007-3794
- 2026-10-03 Alias added: GHSA-9xh5-8jph-vqv9
References
More Hitachi Cosminexus Application Server vulnerabilities
- TI-2009-04532 Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and… CVSS 2.0HIGH 9.3
- TI-2007-03517 Unspecified vulnerability in the ADM daemon in Hitachi TPBroker before 20070706 allows… CVSS 2.0HIGH 7.8
- TI-2007-00501 Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server… CVSS 2.0MEDIUM 6.8
- TI-2007-03992 The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and… CVSS 2.0MEDIUM 4.9
- TI-2005-02991 The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used… CVSS 2.0LOW 2.6
Sources
- CVE-2007-3794 · CVE Program
- CVE-2007-3794 · NVD
- FIRST EPSS
- GHSA-9xh5-8jph-vqv9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences