CVE-2007-5281

CWE-20 — Improper Input Validation3 documents3 sources

Severity

5.0MEDIUM

EPSS

0.9%

top 24.70%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Hitachi Ucosminexus Application Server Enterprise Hitachi Ucosminexus Application Server Standard Hitachi Ucosminexus Client +5 more

Timeline

PublishedOct 9

Latest updateMay 1

Description

The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be the same as CVE-2007-3698.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages7 packages

▶NVDhitachi/ucosminexus_service_platform7_50

▶NVDhitachi/ucosminexus_service_architect7_50

▶NVDhitachi/ucosminexus_developer_standard07_50

▶NVDhitachi/ucosminexus_developer_professional07_50

▶NVDhitachi/ucosminexus_client07_50

🔴Vulnerability Details

GHSA

GHSA-7f3h-668h-399r: The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7↗2022-05-01

▶

CVEList

CVE-2007-5281: The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7↗2007-10-09

▶