CVE-2004-2497

Published Oct 25, 2005 CVSS 2.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2004-2488 Cross-site scripting (XSS) vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 1:29 AM
Reserved
Oct 25, 2005, 12:00 AM
Status
Modified
Published
Dec 31, 2004, 5:00 AM
Modified
Jun 16, 2026, 10:09 PM