← Vulnerability feed

Vulnerability record · CVE-2006-3574 · published 13 July 2006

CVE-2006-3574: Hitachi cosminexus collaboration portal vulnerability

Hitachi · Cosminexus Collaboration Portal

Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-20-/D, and uCosminexus Collaboration Portal and Forum/File Sharing before 06-20-/C, allow remote attackers to "execute malicious scripts" via unknown vectors (aka HS06-014-01).

6.8 CVSS 2.0 Medium EPSS 1.4% · top 27.8%
6.8CVSS 2.0 base score
1.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-20-/D, and uCosminexus Collaboration Portal and Forum/File Sharing before 06-20-/C, allow remote attackers to "execute malicious scripts" via unknown vectors (aka HS06-014-01).

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/20926 PatchVendor Advisory
http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/01-e.html Patch
http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/index-e.html Patch
http://www.securityfocus.com/bid/18830 Patch
http://www.vupen.com/english/advisories/2006/2665
https://exchange.xforce.ibmcloud.com/vulnerabilities/27605
http://secunia.com/advisories/20926 PatchVendor Advisory
http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/01-e.html Patch
http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/index-e.html Patch
http://www.securityfocus.com/bid/18830 Patch
http://www.vupen.com/english/advisories/2006/2665
https://exchange.xforce.ibmcloud.com/vulnerabilities/27605

Track CVE-2006-3574 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2005-4323Hitachi cosminexus collaboration portal vulnerabilityUnspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, an…EPSS 2.0%6.8CVE-2007-1786Hitachi cosminexus collaboration portal vulnerabilitySQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Gro…EPSS 1.2%5.0CVE-2007-5808Hitachi groupmax collaboration portal vulnerabilityUnspecified vulnerability in the Groupmax Collaboration - Schedule component in Hitachi Groupmax Collaboration Portal 07-30 through 07-30-/F and 07-3…EPSS 1.4%4.9CVE-2007-4124Hitachi cosminexus application server vulnerabilityThe session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, ca…EPSS 1.0%4.3CVE-2007-3043Hitachi groupmax collaboration portal vulnerabilityCross-site scripting (XSS) vulnerability in Collaboration - File Sharing 01-20 up to 01-20-/B and 01-30 up to 01-30-/B in Hitachi Groupmax Collaborat…EPSS 1.2%4.3CVE-2005-4322Hitachi cosminexus collaboration portal vulnerabilityMultiple cross-site scripting (XSS) vulnerabilities in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal …EPSS 1.4%3.5CVE-2007-4204Hitachi groupmax collaboration portal vulnerabilityHitachi Groupmax Collaboration - Schedule, as used in Groupmax Collaboration Portal 07-32 through 07-32-/B, uCosminexus Collaboration Portal 06-32 th…EPSS 0.86%

Source: NIST National Vulnerability Database (record CVE-2006-3574), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.