Hitachi

Records257All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical49CVSS 9.0–10.0

CVSS high90CVSS 7.0–8.9

Exploited now

Hitachi records in CISA KEV

TI-2022-21503 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability CRITICAL 97KEV 2025-03-03 TI-2022-21586 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability CRITICAL 99KEV 2025-03-03

Components

Products in the NVD configurations · select one to filter the records

Device Manager 17 records MEDIUM Vantara Pentaho 16 records MEDIUM Vantara Pentaho Business Analytics Server 14 records CRITICAL Ucosminexus Service Platform 13 records MEDIUM Tuning Manager 10 records MEDIUM Ops Center Analyzer 9 records MEDIUM Ucosminexus Application Server Enterprise 9 records MEDIUM Ucosminexus Application Server Standard 9 records MEDIUM

Records

17 records in Device Manager · all components

TI-2017-06732 CVE-2017-9294 · GHSA-p6m2-hwq7-6gpc

RMI vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to…

MEDIUM 47

RMI vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to execute internal commands without authentication via RMI ports.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02418 Published 2017-05-29 No fix listed

TI-2023-16986 CVE-2023-34142 · GHSA-x7ww-xhxw-m928

Cleartext Transmission Vulnerability in Hitachi Device Manager

MEDIUM 41

Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Data Collector components) allows Interception.This issue affec…

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.0034 Published 2023-07-18 Fixed in 8.8.5-02 CWE-319

TI-2023-26772 CVE-2023-49107 · GHSA-3wgw-h3pq-p82c

Generation of Error Message Containing Sensitive Information Vulnerability in Hitachi Device Manager

LOW 39

Generation of Error Message Containing Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Agent modules).This issue affects Hitachi Device Manager: before 8.8.5-04.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00408 Published 2024-01-16 Fixed in 8.8.5-04 CWE-209

TI-2019-12958 CVE-2019-17360 · GHSA-5xrg-q368-r3h9

A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.7.0-00 allows an…

LOW 36

A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.7.0-00 allows an unauthenticated remote user to trigger a denial of service (DoS) condition because of Uncontrolled Resource Consumption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01339 Published 2019-11-12 No fix listed CWE-400

TI-2018-14988 CVE-2018-21026 · GHSA-9m6w-5w2x-frfm

A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.6.5-00 allows an…

LOW 36

A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.6.5-00 allows an unauthenticated remote user to read internal information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01376 Published 2019-11-12 No fix listed CWE-200

TI-2018-10583 CVE-2018-14735 · GHSA-g76q-f38j-rpvf

An Information Exposure issue was discovered in Hitachi Command Suite 8.5.3.

LOW 36

An Information Exposure issue was discovered in Hitachi Command Suite 8.5.3.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01352 Published 2018-08-09 No fix listed CWE-200

TI-2023-16987 CVE-2023-34143 · GHSA-49mg-v9x7-jfqh

Improper Validation of Certificate Vulnerability in Hitachi Device Manager

LOW 35

Improper Validation of Certificate with Host Mismatch vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Data Collector components) allows Man in the Middle Attac…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00239 Published 2023-07-18 Fixed in 8.8.5-02 CWE-297

TI-2023-26771 CVE-2023-49106 · GHSA-x83h-6qgp-hw2h

Missing Password Field Masking Vulnerability in Hitachi Device Manager

LOW 33

Missing Password Field Masking vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Agent component).This issue affects Hitachi Device Manager: before 8.8.5-04.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00444 Published 2024-01-16 Fixed in 8.8.5-04 CWE-549

TI-2020-18866 CVE-2020-36695 · GHSA-m5wh-8x43-f8p3

File and Directory Permission Vulnerability in Hitachi Command Suite

LOW 33

Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component), Hitachi Tiered Storage Manager on Linux, Hitachi Replication Manager on Linux, Hitachi Tuning Manager on L…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2023-07-18 Fixed in 8.8.5-02, 8.8.3-08 CWE-276

TI-2017-06733 CVE-2017-9295 · GHSA-3v98-72qw-v7r9

XXE vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication…

LOW 31

XXE vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to read arbitrary files.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01054 Published 2017-05-29 No fix listed CWE-611

TI-2018-14995 CVE-2018-21033 · GHSA-x4xv-pfvp-jg8m

A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director…

LOW 30

A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitra…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0084 Published 2020-02-14 No fix listed CWE-20

TI-2017-06735 CVE-2017-9297 · GHSA-9hj8-4rc7-p6vh

Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote…

LOW 29

Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to redirect users to arbitrary web sites.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00926 Published 2017-05-29 No fix listed CWE-601

TI-2017-06734 CVE-2017-9296 · GHSA-j9mp-68pg-9p77

Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Tuning…

LOW 29

Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Tuning Manager before 8.5.2-00 allows remote attackers to redirect authenticated users to arbitrary web sites.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00926 Published 2017-05-29 No fix listed CWE-601

TI-2017-06736 CVE-2017-9298 · GHSA-fhfp-42hv-9wm6

Cross-site scripting vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi…

LOW 25

Cross-site scripting vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to execute arbitrary JavaScript code.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00609 Published 2017-05-29 No fix listed CWE-79

TI-2025-05211 CVE-2025-5781 · GHSA-3pm4-mcqw-jq89

Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager

LOW 23

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration M…

CVSS 3.1MEDIUM 5.2 Local Low privileges No interaction EPSS 0.0015 Published 2026-02-25 Fixed in 11.0.5-00, 8.6.5-00 CWE-532

TI-2018-14994 CVE-2018-21032 · GHSA-7r29-2mx5-wh83

A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation…

LOW 22

A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to 8.5.0-00 allow authenticated remote users to expose technical information through error messages.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00872 Published 2020-02-14 No fix listed CWE-209

TI-2015-01399 CVE-2015-1565 · GHSA-gwj9-6rc9-c3g4

Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager…

LOW 22

Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2015-02-09 No fix listed CWE-79

Open these records in search →

Critical	49
High	90
Medium	113
Low	5
No CVSS	0