PT-2014-5723

CVE-2014-4189

·

تاريخ النشر

2014-06-17

·

تاريخ التحديث

2015-09-02

الوصف من

CVSS 2.0
4.3
متوسطة
المقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Hitachi Tuning Manager versions prior to 7.6.1-06 Hitachi Tuning Manager versions 8.x prior to 8.0.0-04 JP1/Performance Management - Manager Web Option versions 07-00 through 07-54
Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Recommendations For Hitachi Tuning Manager versions prior to 7.6.1-06, update to version 7.6.1-06 or later. For Hitachi Tuning Manager versions 8.x prior to 8.0.0-04, update to version 8.0.0-04 or later. For JP1/Performance Management - Manager Web Option versions 07-00 through 07-54, consider disabling web script injection capabilities until a patch is available.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾