CVE-2024-0715 HIGH

CVE-2024-0715: EL Injection Vulnerability in Hitachi Global Link Manager

Vendor Hitachi

Product Hitachi Global Link Manager

Weakness CWE-917

Published February 20, 2024

Last update August 8, 2024

View on NVD All CVEs

CVSS base score

7.6/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

What the vulnerability does

01Description

Expression Language Injection vulnerability in Hitachi Global Link Manager on Windows allows Code Injection.This issue affects Hitachi Global Link Manager: before 8.8.7-03.

Key dates

02Disclosure timeline

February 20, 2024 CVE published

August 8, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-0715 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/917.html

Related vulnerabilities

04Related CVE

CVE-2022-4146 EL Injection Vulnerability in Hitachi Replication Manager CVE-2026-31380 Apache OFBiz: FreeMarker SSTI via Duplicate Parameter Sanitization Bypass CVE-2026-42811 Apache Polaris: could broaden vended GCS credentials through unescaped identifier content in access-boundary CEL conditions CVE-2025-11175 DiscussionTools should use better regex CVE-2026-41719 Spring Data KeyValue - SpEL Injection vulnerability in SpelPropertyComparator