Hitachi Multiple Business Logic Products Unspecified Cross-Site Scripting Vulnerability

Multiple Hitachi Business Logic products are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

The following products are affected:

Hitachi Business Logic - Container
Hitachi Business Logic - Container 2
Electronic Form Workflow - Standard Set
Electronic Form Workflow - Professional Library Set
Electronic Form Workflow - Developer Client Set
Electronic Form Workflow Set
Electronic Form Workflow - Professional Set
Electronic Form Workflow - Developer Set


 

Privacy Statement
Copyright 2010, SecurityFocus