kbrain

CVE-2007-1854

MEDIUM · CVSS 5.0EPSS 1.3%EU EUVD

Unspecified vulnerability in Hitachi Cosminexus Component Container 07-00 through 07-00-10, and 07-10 through 07-10-03, as used in uCosminexus Application Server Enterprise and Standard; uCosminexus Service Platform; uCosminexus Developer Standard and Professional; uCosminexus Service Architect; Electronic Form Workflow Standard Set, Professional Library Set, and Developer Client Set; and uCosminexus ERP Integrator, does not properly manage session information, which has an unspecified impact related to "unintended other requests."

Key facts

CVSS score
5.0 (v2.0)
Severity
MEDIUM
CVSS vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS score
1.3% (70th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2007-1848)
Published
April 3, 2007
NVD last modified
June 16, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2007-1848 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

  • hitachi / cosminexus component container
  • hitachi / cosminexus component container
  • hitachi / cosminexus component container
  • hitachi / cosminexus component container
  • hitachi / cosminexus component container
  • hitachi / cosminexus component container
  • hitachi / cosminexus component container
  • hitachi / cosminexus component container
  • hitachi / cosminexus component container
  • hitachi / cosminexus component container
  • hitachi / electronic form workflow
  • hitachi / electronic form workflow
  • hitachi / electronic form workflow
  • hitachi / ucosminexus application server
  • hitachi / ucosminexus application server
  • hitachi / ucosminexus developer
  • hitachi / ucosminexus developer
  • hitachi / ucosminexus erp integrator
  • hitachi / ucosminexus service architect
  • hitachi / ucosminexus service platform

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain