Vulnerability description
A cross-site scripting vulnerability was found in the component product uCosminexus Portal Framework, the component product uCosminexus Portal Framework - Light, and the following products, which use either of the aforementioned component products:
- uCosminexus Portal Framework Entry Set
- Groupmax Collaboration Portal
- Groupmax Collaboration Web Client - Forum/File Sharing
- Groupmax Collaboration Web Client - Mail/Schedule
- Cosminexus Collaboration Portal
- uCosminexus Collaboration Portal
- Cosminexus Collaboration Portal - Forum/File Sharing
- uCosminexus Collaboration Portal - Forum/File Sharing
- uCosminexus Content Manager
- JP1/Integrated Management - Service Support
- Electronic Form Workflow Set
- Electronic Form Workflow Developer Set
- uCosminexus Navigation Platform
- uCosminexus Navigation Platform - User License
- uCosminexus Navigation Platform - Authoring License
- uCosminexus Navigation Developer
Remote users can exploit this vulnerability in order to execute malicious scripts. The affected products and versions are listed below. Please upgrade all applicable products to the fixed version.
Fixed products
The information is organized under the following headings:
(Example)
Product name: Gives the name of the fixed product.
Version:
- Platform
- Gives the fixed version, and release date.
Scheduled version(s):
- Platform
- Gives the fixed version scheduled to be released.
Product name: uCosminexus Portal Framework
Version(s):
- Windows
- 08-01-/A December 21, 2009
Scheduled version(s):
- Linux
- 08-02
Product name: uCosminexus Portal Framework - Light
Version(s):
- Windows
- 08-01-/A December 21, 2009
Product name: Groupmax Collaboration Portal
Version(s):
- Windows
- 07-70-/A April 20, 2010
Product name: Groupmax Collaboration Web Client - Forum/File Sharing
Version(s):
- Windows
- 07-70-/A April 20, 2010
Product name: Groupmax Collaboration Web Client - Mail/Schedule
Version(s):
- Windows
- 07-70-/A April 20, 2010
Product name: uCosminexus Collaboration Portal
Version(s):
- Windows
- 06-70-/A April 20, 2010
Product name: uCosminexus Collaboration Portal - Forum/File Sharing
Version(s):
- Windows
- 06-70-/A April 20, 2010
Product name: uCosminexus Content Manager
Scheduled version(s):
- Windows
- 01-02-/B
Product name: JP1/Integrated Management - Service Support
Scheduled version(s):
Product name: Electronic Form Workflow Set
Scheduled version(s):
- Windows
- 07-60-/P
Product name: Electronic Form Workflow Developer Set
Scheduled version(s):
- Windows
- 07-60-/P
Product name: uCosminexus Navigation Platform
Version(s):
- Windows
- 08-21-/A December 22, 2010
Product name: uCosminexus Navigation Platform - User License
Version(s):
- Windows
- 08-21-/A December 22, 2010
Product name: uCosminexus Navigation Platform - Authoring License
Version(s):
- Windows
- 08-21-/A December 22, 2010
Product name: uCosminexus Navigation Developer
Version(s):
- Windows
- 08-21-/A December 22, 2010
For details on the fixed products, contact your Hitachi support service representative.