CVE-2006-1574
Summary
| CVE | CVE-2006-1574 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-04-01 00:04:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web, World Wide Web Desktop, World Wide Web for Scheduler, and Desktop for Scheduler, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. |
Risk And Classification
Primary CVSS: v2.0 5.8 from [email protected]
AV:N/AC:M/Au:N/C:P/I:P/A:N
EPSS: 0.005270000 probability, percentile 0.671490000 (date 2026-04-19)
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:N/C:P/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Hitachi | Groupmax World Wide Web | 2 | All | All | All |
| Application | Hitachi | Groupmax World Wide Web | 3 | All | All | All |
| Application | Hitachi | Groupmax World Wide Web Desktop | All | All | All | All |
| Application | Hitachi | Groupmax World Wide Web Desktop | 5 | All | All | All |
| Application | Hitachi | Groupmax World Wide Web Desktop | 6 | All | All | All |
| Application | Hitachi | Groupmax World Wide Web Desktop Scheduler | 5 | All | All | All |
| Application | Hitachi | Groupmax World Wide Web Scheduler | 2 | All | All | All |
| Application | Hitachi | Groupmax World Wide Web Scheduler | 3 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Hitachi Groupmax World Wide Web Unspecified Cross-Site Scripting Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| www.hitachi-support.com/security_e/vuls_e/HS06-005_e/index-e.html | af854a3a-2127-422b-91ae-364da2661108 | www.hitachi-support.com | Patch |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| www.osvdb.org/24295 | af854a3a-2127-422b-91ae-364da2661108 | www.osvdb.org | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Secunia - Advisories - Groupmax World Wide Web Cross-Site Scripting Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.