← Vulnerability feed

Vulnerability record · CVE-2007-1786 · published 31 March 2007

CVE-2007-1786: Hitachi cosminexus collaboration portal vulnerability

Hitachi · Cosminexus Collaboration Portal

SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

6.8 CVSS 2.0 Medium EPSS 1.2% · top 33.5%
6.8CVSS 2.0 base score
1.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
5Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

5 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/34544
http://secunia.com/advisories/24693 Vendor Advisory
http://www.hitachi-support.com/security_e/vuls_e/HS07-008_e/index-e.html Vendor Advisory
http://www.securityfocus.com/bid/23208
http://www.vupen.com/english/advisories/2007/1168
https://exchange.xforce.ibmcloud.com/vulnerabilities/33348
http://osvdb.org/34544
http://secunia.com/advisories/24693 Vendor Advisory
http://www.hitachi-support.com/security_e/vuls_e/HS07-008_e/index-e.html Vendor Advisory
http://www.securityfocus.com/bid/23208
http://www.vupen.com/english/advisories/2007/1168
https://exchange.xforce.ibmcloud.com/vulnerabilities/33348

Track CVE-2007-1786 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2005-4323Hitachi cosminexus collaboration portal vulnerabilityUnspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, an…EPSS 2.0%6.8CVE-2006-3574Hitachi cosminexus collaboration portal vulnerabilityMultiple cross-site scripting (XSS) vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-20-/D, and uCosminexus Collabor…EPSS 1.4%5.0CVE-2007-5808Hitachi groupmax collaboration portal vulnerabilityUnspecified vulnerability in the Groupmax Collaboration - Schedule component in Hitachi Groupmax Collaboration Portal 07-30 through 07-30-/F and 07-3…EPSS 1.4%4.9CVE-2007-4124Hitachi cosminexus application server vulnerabilityThe session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, ca…EPSS 1.0%4.3CVE-2007-3043Hitachi groupmax collaboration portal vulnerabilityCross-site scripting (XSS) vulnerability in Collaboration - File Sharing 01-20 up to 01-20-/B and 01-30 up to 01-30-/B in Hitachi Groupmax Collaborat…EPSS 1.2%4.3CVE-2005-4322Hitachi cosminexus collaboration portal vulnerabilityMultiple cross-site scripting (XSS) vulnerabilities in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal …EPSS 1.4%3.5CVE-2007-4204Hitachi groupmax collaboration portal vulnerabilityHitachi Groupmax Collaboration - Schedule, as used in Groupmax Collaboration Portal 07-32 through 07-32-/B, uCosminexus Collaboration Portal 06-32 th…EPSS 0.86%

Source: NIST National Vulnerability Database (record CVE-2007-1786), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.