VendorsHitachicosminexus_serverweb_01-01_1
Vulnerabilities

Hitachi Cosminexus Server web_01-01_1

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

2CVEs
CVE-2004-1478
JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session.
Published 2005-02-13 · Modified
7.5EPSS 0.034
CVE-2004-0928
The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm".
Published 2005-04-21 · Modified
5.0EPSS 0.041