Hitachi has acknowledged multiple vulnerabilities in uCosminexus products, which can be exploited by malicious, local users to disclose potentially sensitive information, manipulate certain data, and cause a DoS (Denial of Service) and by malicious people to conduct cross-site scripting attacks, disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.

The vulnerabilities are caused due to vulnerabilities in the bundled version of Cosminexus Developer's Kit for Java.

For more information:
SA49472

Please see the vendor's advisory for a list of affected products.

Solution
Update to a fixed version. Please contact the vendor for more information.
Original Advisory
HS12-015:
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-015/index.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers