Vulnerabilities > CVE-2004-2497 - Cross-Site Scripting and Information Disclosure vulnerability in Hitachi Web Page Generator

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

hitachi

NVD

Published: 2004-12-31

Updated: 2017-07-11

Summary

Cross-site scripting (XSS) vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

Vulnerable Configurations

Part	Description	Count
Application	Hitachi Hitachi WEB Page Generator 01_00 Hitachi WEB Page Generator 01_01_C Hitachi WEB Page Generator 02_00 Hitachi WEB Page Generator 02_00_C Hitachi WEB Page Generator Enterprise 03_00 Hitachi WEB Page Generator Enterprise 03_02_C Hitachi WEB Page Generator Enterprise 03_03 Hitachi WEB Page Generator Enterprise 03_03_C Hitachi WEB Page Generator Enterprise 03_03_D Hitachi WEB Page Generator Enterprise 04_00 Hitachi WEB Page Generator Enterprise 04_00_C Hitachi WEB Page Generator Enterprise 04_01 Hitachi WEB Page Generator Enterprise 04_01_B	13

Summary

Vulnerable Configurations

References