Description
Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A allow remote attackers to inject arbitrary web script or HTML via the (1) Schedule and (2) Calendar components.
References
- 1015241 vdb-entry
- 20969 vdb-entry
- 17634 third-party-advisory
- 15498 vdb-entry
- 1015242 vdb-entry
- 22126 vdb-entry
- http://www.hitachi-support.com/security_e/vuls_e/HS05-023_e/01-e.html
- hitachi-groupmax-multiple-xss(23197) vdb-entry