Description
Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.
Affected Platforms
Hitachi Ucosminexus Application Server StandardHitachi Ucosminexus Developer LightHitachi Hitachi Web ServerHitachi Cosminexus Server - Web Edition Version 4Hitachi Cosminexus Developer Standard Version 6Hitachi Cosminexus Developer Light Version 6Hitachi Cosminexus Server - Standard Edition Version 4Hitachi Ucosminexus Developer StandardHitachi Cosminexus Developer Professional Version 6Hitachi Ucosminexus Application Server Smart Edition