Vulnerabilities > Hitachi > Ucosminexus ERP Integrator

DATE CVE VULNERABILITY TITLE RISK
2007-08-01 CVE-2007-4124 Unspecified vulnerability in Hitachi products
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.
network
hitachi
4.9
2007-04-03 CVE-2007-1854 Remote Unauthorized Access vulnerability in Hitachi uCosminexus Application Server Session Information
Unspecified vulnerability in Hitachi Cosminexus Component Container 07-00 through 07-00-10, and 07-10 through 07-10-03, as used in uCosminexus Application Server Enterprise and Standard; uCosminexus Service Platform; uCosminexus Developer Standard and Professional; uCosminexus Service Architect; Electronic Form Workflow Standard Set, Professional Library Set, and Developer Client Set; and uCosminexus ERP Integrator, does not properly manage session information, which has an unspecified impact related to "unintended other requests."
network
low complexity
hitachi
5.0