Two vulnerabilities have been reported in Hitachi Command Suite products, which can be exploited by malicious people to conduct cross-site scripting attacks and cause a DoS (Denial of Service).

1) Certain unspecified input is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.

2) An unspecified error can be exploited to cause a crash. No further information is currently available.

Please see the vendor's advisory for a list of affected products.

Solution
Update to version 7.3.0-00 released May 31, 2012.

Provided and/or discovered by
Reported by the vendor.

Original Advisory
HS12-017:
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-017/index.html

HS12-018:
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-018/index.html

Deep Links
Links available to Secunia VIM customers