CVE:CVE-2007-4760
CNNVD:CNNVD-200709-075
Cosminexus 7 和 7.5版本的Java Cosminexus Developer's Kit中的javadoc工具，能产生包含跨站脚本攻击漏洞的HTML文件，远程攻击者可以借助未明向量，注入任意web脚本或HTML。
solution:Upgrade hitachi ucosminexus_application_server_enterprise to a higher version than 07_00,07_00_01,07_00_02,07_00_03,07_10,07_10_01,7_20,7_20_01,and avoid the version 07_00,07_00_01,07_00_02,07_00_03,07_10,07_10_01,7_20,7_20_01; Upgrade hitachi ucosminexus_application_server_standard to a higher version than 07_00,07_00_01,07_00_02,07_00_03,07_10,7_10_01,7_20,7_20_01,and avoid the version 07_00,07_00_01,07_00_02,07_00_03,07_10,7_10_01,7_20,7_20_01; Upgrade hitachi ucosminexus_developer_standard to a higher version than 07_00,07_00_01,07_00_02,07_00_03,07_10,07_10_01,07_20,07_20_01,07_50,and avoid the version 07_00,07_00_01,07_00_02,07_00_03,07_10,07_10_01,07_20,07_20_01,07_50; Upgrade hitachi ucosminexus_service_platform to a higher version than 07_00,07_00_01,07_00_02,07_00_03,07_10,07_10_01,07_20,7_20_01,and avoid the version 07_00,07_00_01,07_00_02,07_00_03,07_10,07_10_01,07_20,7_20_01