07.50

DATE	CVE	VULNERABILITY TITLE	RISK
2007-10-09	CVE-2007-5281	Improper Input Validation vulnerability in Hitachi products The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. network low complexity hitachi CWE-20	5.0
2007-09-08	CVE-2007-4760	Cross-Site Scripting vulnerability in Hitachi products The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. network hitachi CWE-79	4.3