Copyright(C) 2006, 2014, Hitachi Ltd. All rights reserved.
Multiple Vulnerabilities in JP1/Cm2/Network Node Manager i
Multiple vulnerabilities were found in JP1/Cm2/Network Node Manager i.
Buffer Overflow Vulnerability in JP1/Cm2/Network Node Manager i
Multiple buffer overflow vulnerabilities exist in JP1/Cm2/Network Node Manager i.
Cross-site Scripting Vulnerability in Cosminexus
A cross-site scripting vulnerability (CVE-2013-5855) was found in Cosminexus.
Vulnerability about SSL Encryption in Cosminexus HTTP Server and Hitachi Web Server
A vulnerability about SSL encryption (CVE-2013-0169, also known as the Lucky Thirteen issue) exists in Cosminexus HTTP Server and Hitachi Web Server.
Vulnerability (TA13-207A) in IPMI for HA8000
BMC (Baseboard Management Controller) has vulnerability in IPMI.
Vulnerability in JP1/NETM/DM, Job Management Partner 1/Software Distribution data reproduction functionality
A vulnerability was found in JP1/NETM/DM and Job Management Partner 1/Software Distribution that can not suppressed to write to the Built-in type USB storage device.
Multiple vulnerabilities have been found in Cosminexus.
Vulnerability about SSL Encryption in Cosminexus
A vulnerability about SSL encryption (CVE-2013-2566) exists in Cosminexus Developer's Kit for Java(TM).
Multiple Vulnerabilities in JP1/Performance Management - Web Console, and JP1/Performance Management - Manager Web Option
Multiple vulnerabilities were found in JP1/Performance Management - Web Console, and JP1/Performance Management - Manager Web Option.
ClassLoader Manipulation Vulnerability in Hitachi Command Suite Products
A ClassLoader manipulation vulnerability (CVE-2014-0114) exists in Hitachi Command Suite Products.
DoS Vulnerability in JP1/IT Desktop Management - Manager and Job Management Partner 1/IT Desktop Management - Manager
A vulnerability to denial-of-service attacks (CVE-2014-0050) was found in JP1/IT Desktop Management - Manager and Job Management Partner 1/IT Desktop Management - Manager.
DoS Vulnerability in Hitachi IT Operations Director
A vulnerability to denial-of-service attacks (CVE-2014-0050) was found in Hitachi IT Operations Director.
DoS Vulnerability in Hitachi IT Operations Analyzer
A vulnerability to denial-of-service attacks (CVE-2014-0050) was found in Hitachi IT Operations Analyzer.
A vulnerability about SSL encryption (CVE-2013-2566) exists in Cosminexus HTTP Server and Hitachi Web Server.
XXE (Xml eXternal Entity) Vulnerability in COBOL2002
A vulnerability about XXE was found in COBOL2002.
Multiple Vulnerabilities in Hitachi Tuning Manager, and JP1/Performance Management - Manager Web Option
Multiple vulnerabilities were found in Hitachi Tuning Manager, and JP1/Performance Management - Manager Web Option.
Multiple Vulnerabilities about SSL Client Authentication in Cosminexus HTTP Server
Multiple vulnerabilities exist in Cosminexus HTTP Server.
Vulnerability in the directory index functionality of Cosminexus HTTP Server and Hitachi Web Server
DoS attacks can occur while the directory index functionality of Cosminexus HTTP Server and Hitachi Web Server is in use. Please note that this vulnerability corresponds to CVE-2011-0419.
Vulnerability in Hitachi Web Server header customization functionality
When the header customization functionality via RequestHeader of Hitachi Web Server is being used, data residing in memory that has been deleted might be referred to. Please note that this vulnerability corresponds to CVE-2010-0434.
Vulnerability in Hitachi Web Server SSL and TLS protocols
When the SSL functionality of Hitachi Web Server is being used, a malicious user can insert arbitrary data on top of communication data. Please note that this vulnerability corresponds to CVE-2009-3555.
DoS Vulnerability in the Hitachi Web Server SSL function
A vulnerability to denial-of-service (DoS) attacks was found in the Hitachi Web Server SSL function. Please note that this vulnerability corresponds to CVE-2009-3245.
Vulnerability in the Hitachi Web Server Function for Authenticating SSL Clients
When Hitachi Web Server receives a request that uses an invalid client certificate, an invalid environment parameter might be set, and a malicious user can impersonate another user. Please note that this vulnerability corresponds to CVE-2008-0555.
DoS Vulnerability in Hitachi Web Server reverse proxy function
When Hitachi Web Server uses the reverse proxy function, the amount of used memory might increase because of illegal responses continuously received from the back-end web server. Please note that this vulnerability corresponds to CVE-2008-2364.
Cross-site Scripting Vulnerability When Using the Status Information Display Function in Hitachi Web Server
A cross-site scripting vulnerability was found in the status information display function. Please note that this vulnerability corresponds to CVE-2007-6388.
Cross-Site Scripting Vulnerability in the Hitachi Web Server Error Page
A cross-site scripting vulnerability was found in Hitachi Web Server. Please note that this vulnerability corresponds to CVE-2007-6203.
Cross-Site Scripting Vulnerability in the Hitachi Web Server Imagemap Function
Using the imagemap function of Hitachi Web Server can cause a vulnerability to cross-site scripting. Please note that this vulnerability corresponds to CVE-2007-5000.
Cross-Site Scripting Vulnerability When Using the DirectoryIndex function in Hitachi Web Server
When the DirectoryIndex function is being used, malicious scripts can be executed on a client web browser. Please note that this vulnerability corresponds to CVE-2007-4465.
Vulnerability When Using a Reverse Proxy Function of Hitachi Web Server
When a reverse proxy function of Hitachi Web Server receives an invalid response from a remote backend server, Hitachi Web Server processes might stop abnormally. Please note that this vulnerability corresponds to CVE-2007-3847.
Cross-Site Scripting Vulnerability in Hitachi Web Server Function for Creating Server-Status Pages
A cross-site scripting vulnerability was found in Hitachi Web Server. Malicious remote users can exploit this vulnerability to insert malicious scripts into a server-status page of Hitachi Web Server, and then execute them on the client. Please note that this vulnerability corresponds to CVE-2006-5752.
Vulnerability in Hitachi Web Server Function for Authenticating SSL Clients
Hitachi Web Server might verify a forged signature in an SSL client certificate. Please note that this vulnerability corresponds to CVE-2006-4339.
Multiple Vulnerabilities of Hitachi Web Server
Multiple vulnerabilities (CVE-2005-2969, CVE-2005-3352, CVE-2006-3918) were found in Hitachi Web Server (HWS).
Vulnerability about TLS Protocol in Cosminexus HTTP Server and Hitachi Web Server
A vulnerability (CVE-2011-3389) exists in Cosminexus HTTP Server and Hitachi Web Server.
A vulnerability to denial-of-service attacks (CVE-2014-0050) was found in Cosminexus.
Vulnerability in JP1/File Transmission Server/FTP
A vulnerability about access control violation exists in JP1/File Transmission Server/FTP. Malicious users can exploit this vulnerability to access arbitrary directries on FTP server via FTP client.
Cross-site Scripting Vulnerability in JP1/Integrated Management - Service Support
A cross-site scripting vulnerability was found in JP1/Integrated Management - Service Support.
A vulnerability to denial-of-service attacks (CVE-2012-3544 and CVE-2013-4322) was found in Cosminexus.
A vulnerability about JAXP have been found in Cosminexus.
Issue with Random Number Generation Algorithm in Cosminexus HTTP Server and Hitachi Web Server
NIST (The National Institute of Standards and Technology) published specifications for random number generation algorithm, which Cosminexus HTTP Server and Hitachi Web Server uses.
Issue with Random Number Generation Algorithm in Cosminexus Developer's Kit for Java(TM)
NIST (The National Institute of Standards and Technology) published specifications for random number generation algorithm, which Cosminexus Developer's Kit for Java(TM) uses.
A Problem of CPU Consumption in Host Data Collector bundled with Hitachi Device Manager Software
When Host Data Collector receives an unexpected request, a problem of CPU consumption might occur.