Description
Cross-site scripting (XSS) vulnerability in the Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replication Monitor, and GlobalLink Availability Manager before 20070528 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.
References
- hitachi-hicommand-expectheader-xss(35286) vdb-entry
- 37848 vdb-entry
- http://www.hitachi-support.com/security_e/vuls_e/HS07-017_e/index-e.html
- ADV-2007-2457 vdb-entry
- 24797 vdb-entry
- 25973 third-party-advisory
- 37849 vdb-entry