Read the docs
TI-2007-05576 Aliases CVE-2007-5810GHSA-cfg9-hj54-h2q5

Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does…

Priority LOW 24CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.

Why it matters now

EPSS 0.00781 56th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 44

CPEVersionsRoleVendor
cpe:2.3:a:hitachi:cosminexus_application_server_enterprise:*:*:*:*:*:*:*:*up to 06_51_jVulnerableHitachi
cpe:2.3:a:hitachi:cosminexus_application_server_standard:*:*:*:*:*:*:*:*up to 06_51_jVulnerableHitachi
cpe:2.3:a:hitachi:cosminexus_developer_light_version_6:*:*:*:*:*:*:*:*up to 06_51_jVulnerableHitachi
cpe:2.3:a:hitachi:cosminexus_developer_professional_version_6:*:*:*:*:*:*:*:*up to 06_51_jVulnerableHitachi
cpe:2.3:a:hitachi:cosminexus_developer_standard_version_6:*:*:*:*:*:*:*:*up to 06_51_jVulnerableHitachi
cpe:2.3:a:hitachi:cosminexus_server:*:*:*:*:*:*:*:*up to 04_01VulnerableHitachi
cpe:2.3:a:hitachi:ucosminexus_application_server_enterprise:*:*:*:*:*:*:*:*up to 07_50_01VulnerableHitachi
cpe:2.3:a:hitachi:ucosminexus_application_server_standard:*:*:*:*:*:*:*:*up to 07_50_01VulnerableHitachi
cpe:2.3:a:hitachi:ucosminexus_developer_light:*:*:*:*:*:*:*:*up to 06_71_dVulnerableHitachi
cpe:2.3:a:hitachi:ucosminexus_developer_professional:*:*:*:*:*:*:*:*up to 07_50_01VulnerableHitachi
  • cpe:2.3:a:hitachi:cosminexus_application_server_enterprise:*:*:*:*:*:*:*:* Versions up to 06_51_j Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:cosminexus_application_server_standard:*:*:*:*:*:*:*:* Versions up to 06_51_j Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:cosminexus_developer_light_version_6:*:*:*:*:*:*:*:* Versions up to 06_51_j Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:cosminexus_developer_professional_version_6:*:*:*:*:*:*:*:* Versions up to 06_51_j Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:cosminexus_developer_standard_version_6:*:*:*:*:*:*:*:* Versions up to 06_51_j Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:cosminexus_server:*:*:*:*:*:*:*:* Versions up to 04_01 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:ucosminexus_application_server_enterprise:*:*:*:*:*:*:*:* Versions up to 07_50_01 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:ucosminexus_application_server_standard:*:*:*:*:*:*:*:* Versions up to 07_50_01 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:ucosminexus_developer_light:*:*:*:*:*:*:*:* Versions up to 06_71_d Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:ucosminexus_developer_professional:*:*:*:*:*:*:*:* Versions up to 07_50_01 Vulnerable ·Hitachi
Show 34 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:hitachi:ucosminexus_developer_standard:*:*:*:*:*:*:*:*up to 07_50_01VulnerableHitachi
cpe:2.3:a:hitachi:ucosminexus_service_architect:*:*:*:*:*:*:*:*up to 07_50_01VulnerableHitachi
cpe:2.3:a:hitachi:ucosminexus_service_platform:*:*:*:*:*:*:*:*up to 07_50_01VulnerableHitachi
cpe:2.3:a:hitachi:web_server:01_00:*:hpux:*:*:*:*:*01_00VulnerableHitachi
cpe:2.3:a:hitachi:web_server:01_00:*:solaris:*:*:*:*:*01_00VulnerableHitachi
cpe:2.3:a:hitachi:web_server:01_01:*:aix:*:*:*:*:*01_01VulnerableHitachi
cpe:2.3:a:hitachi:web_server:01_01:*:linux:*:*:*:*:*01_01VulnerableHitachi
cpe:2.3:a:hitachi:web_server:01_01:*:turbolinux:*:*:*:*:*01_01VulnerableHitachi
cpe:2.3:a:hitachi:web_server:01_01_d:*:linux:*:*:*:*:*01_01_dVulnerableHitachi
cpe:2.3:a:hitachi:web_server:01_02_d:*:hpux:*:*:*:*:*01_02_dVulnerableHitachi
cpe:2.3:a:hitachi:web_server:01_02_d:*:solaris:*:*:*:*:*01_02_dVulnerableHitachi
cpe:2.3:a:hitachi:web_server:01_02_e:*:aix:*:*:*:*:*01_02_eVulnerableHitachi
cpe:2.3:a:hitachi:web_server:02_00:*:aix:*:*:*:*:*02_00VulnerableHitachi
cpe:2.3:a:hitachi:web_server:02_00:*:hpux:*:*:*:*:*02_00VulnerableHitachi
cpe:2.3:a:hitachi:web_server:02_00:*:linux:*:*:*:*:*02_00VulnerableHitachi
cpe:2.3:a:hitachi:web_server:02_00:*:solaris:*:*:*:*:*02_00VulnerableHitachi
cpe:2.3:a:hitachi:web_server:02_00:*:turbolinux:*:*:*:*:*02_00VulnerableHitachi
cpe:2.3:a:hitachi:web_server:02_00:*:windows:*:*:*:*:*02_00VulnerableHitachi
cpe:2.3:a:hitachi:web_server:02_00_a:*:linux:*:*:*:*:*02_00_aVulnerableHitachi
cpe:2.3:a:hitachi:web_server:02_02:*:hpux:*:*:*:*:*02_02VulnerableHitachi
cpe:2.3:a:hitachi:web_server:02_02:*:hpux\(ipf\):*:*:*:*:*02_02VulnerableHitachi
cpe:2.3:a:hitachi:web_server:02_02:*:linux:*:*:*:*:*02_02VulnerableHitachi
cpe:2.3:a:hitachi:web_server:02_04_b:*:aix:*:*:*:*:*02_04_bVulnerableHitachi
cpe:2.3:a:hitachi:web_server:02_04_b:*:hpux:*:*:*:*:*02_04_bVulnerableHitachi
cpe:2.3:a:hitachi:web_server:02_04_b:*:hpux\(ipf\):*:*:*:*:*02_04_bVulnerableHitachi
cpe:2.3:a:hitachi:web_server:02_04_b:*:solaris:*:*:*:*:*02_04_bVulnerableHitachi
cpe:2.3:a:hitachi:web_server:02_04_b:*:windows:*:*:*:*:*02_04_bVulnerableHitachi
cpe:2.3:a:hitachi:web_server:02_06_a:*:linux:*:*:*:*:*02_06_aVulnerableHitachi
cpe:2.3:a:hitachi:web_server:03_00:*:aix:*:*:*:*:*03_00VulnerableHitachi
cpe:2.3:a:hitachi:web_server:03_00:*:hpux\(ipf\):*:*:*:*:*03_00VulnerableHitachi
cpe:2.3:a:hitachi:web_server:03_00:*:linux:*:*:*:*:*03_00VulnerableHitachi
cpe:2.3:a:hitachi:web_server:03_00:*:windows:*:*:*:*:*03_00VulnerableHitachi
cpe:2.3:a:hitachi:web_server:03_00_01:*:solaris:*:*:*:*:*03_00_01VulnerableHitachi
cpe:2.3:a:hitachi:web_server:03_00_01:*:windows:*:*:*:*:*03_00_01VulnerableHitachi
  • cpe:2.3:a:hitachi:ucosminexus_developer_standard:*:*:*:*:*:*:*:* Versions up to 07_50_01 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:ucosminexus_service_architect:*:*:*:*:*:*:*:* Versions up to 07_50_01 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:ucosminexus_service_platform:*:*:*:*:*:*:*:* Versions up to 07_50_01 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:01_00:*:hpux:*:*:*:*:* Versions 01_00 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:01_00:*:solaris:*:*:*:*:* Versions 01_00 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:01_01:*:aix:*:*:*:*:* Versions 01_01 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:01_01:*:linux:*:*:*:*:* Versions 01_01 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:01_01:*:turbolinux:*:*:*:*:* Versions 01_01 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:01_01_d:*:linux:*:*:*:*:* Versions 01_01_d Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:01_02_d:*:hpux:*:*:*:*:* Versions 01_02_d Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:01_02_d:*:solaris:*:*:*:*:* Versions 01_02_d Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:01_02_e:*:aix:*:*:*:*:* Versions 01_02_e Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:02_00:*:aix:*:*:*:*:* Versions 02_00 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:02_00:*:hpux:*:*:*:*:* Versions 02_00 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:02_00:*:linux:*:*:*:*:* Versions 02_00 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:02_00:*:solaris:*:*:*:*:* Versions 02_00 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:02_00:*:turbolinux:*:*:*:*:* Versions 02_00 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:02_00:*:windows:*:*:*:*:* Versions 02_00 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:02_00_a:*:linux:*:*:*:*:* Versions 02_00_a Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:02_02:*:hpux:*:*:*:*:* Versions 02_02 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:02_02:*:hpux\(ipf\):*:*:*:*:* Versions 02_02 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:02_02:*:linux:*:*:*:*:* Versions 02_02 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:02_04_b:*:aix:*:*:*:*:* Versions 02_04_b Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:02_04_b:*:hpux:*:*:*:*:* Versions 02_04_b Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:02_04_b:*:hpux\(ipf\):*:*:*:*:* Versions 02_04_b Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:02_04_b:*:solaris:*:*:*:*:* Versions 02_04_b Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:02_04_b:*:windows:*:*:*:*:* Versions 02_04_b Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:02_06_a:*:linux:*:*:*:*:* Versions 02_06_a Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:03_00:*:aix:*:*:*:*:* Versions 03_00 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:03_00:*:hpux\(ipf\):*:*:*:*:* Versions 03_00 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:03_00:*:linux:*:*:*:*:* Versions 03_00 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:03_00:*:windows:*:*:*:*:* Versions 03_00 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:03_00_01:*:solaris:*:*:*:*:* Versions 03_00_01 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:web_server:03_00_01:*:windows:*:*:*:*:* Versions 03_00_01 Vulnerable ·Hitachi

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-5810
  2. 2026-10-03 Alias added: GHSA-cfg9-hj54-h2q5

References

Patch 1

Other 2

  • TI-2007-05575 Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as… CVSS 2.0MEDIUM 4.3
  • TI-2007-04418 Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the… CVSS 2.0MEDIUM 4.6
  • TI-2007-04417 Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the… CVSS 2.0MEDIUM 4.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences