Read the docs

Hitachi

Records257All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical49CVSS 9.0–10.0
CVSS high90CVSS 7.0–8.9

Exploited now

Hitachi records in CISA KEV
TI-2022-21503 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability Priority CRITICAL 97KEV 2025-03-03TI-2022-21586 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability Priority CRITICAL 99KEV 2025-03-03

Components

Products in the NVD configurations · select one to filter the records
Device Manager 17 records MEDIUM Vantara Pentaho 16 records MEDIUM Vantara Pentaho Business Analytics Server 14 records CRITICAL Ucosminexus Service Platform 13 records MEDIUM Tuning Manager 10 records MEDIUM Ops Center Analyzer 9 records MEDIUM Ucosminexus Application Server Enterprise 9 records MEDIUM Ucosminexus Application Server Standard 9 records MEDIUM

Records

9 records in Ops Center Analyzer · all components

TI-2022-19958 CVE-2022-41552 · GHSA-ph2x-jpwc-wrxq

Server-Side Request Forgery Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer

Priority MEDIUM 50

Server-Side Request Forgery (SSRF) vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Data Center Analytics, Analytics probe components), Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0075 Published 2022-11-01 Fixed in 10.9.0-00 CWE-918
TI-2022-04486 CVE-2022-4895 · GHSA-qvrq-rvh5-v2x2

Man-in-the-middle attack Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer

Priority LOW 39

Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component) allows Man in the Middle Att…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0028 Published 2023-02-28 Fixed in 10.9.1-00 CWE-295
TI-2026-01727 CVE-2026-2072 · GHSA-fx3v-mjwv-84rw

Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer

Priority LOW 35

Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor (Analytics probe component), Hitachi Ops Center Analyzer.This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Ana…

CVSS 3.1HIGH 8.2 Network Low privileges User interaction EPSS 0.00164 Published 2026-03-25 Fixed in 11.0.5-00 CWE-79
TI-2023-14305 CVE-2023-30469 · GHSA-6qff-43pg-pg69

Reflrected Cross Site Scripting Vulnerability in Hitachi Ops Center Analyzer

Priority LOW 33

Cross-site Scripting vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component) allows Reflected XSS.This issue affects Hitachi Ops Center Analyzer: from 10.9.1-00 before 10.9.2-00.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00378 Published 2023-05-23 Fixed in 10.9.2-00 CWE-79
TI-2020-18845 CVE-2020-36652 · GHSA-95f9-5fff-hg3v

Incorrect default permissions in Hitachi Automation Director

Priority LOW 32

Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Advisor on Linux (Hitachi Infrastructure Analytics Advisor, Analytics probe server components), Hitach…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0015 Published 2023-02-28 Fixed in 10.9.1-00 CWE-276
TI-2022-03561 CVE-2022-3884 · GHSA-936c-g8cx-9648

Directory Permission Vulnerability in Hitachi Ops Center Analyzer

Priority LOW 31

Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID Agent component) allows local users to read and write specific files.This issue affects Hitachi Ops…

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00154 Published 2023-02-28 Fixed in 10.9.0-01 CWE-276
TI-2022-19959 CVE-2022-41553 · GHSA-3cvf-6w83-9rc3

Information Exposure Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer

Priority LOW 28

Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer pro…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00185 Published 2022-11-01 Fixed in 10.9.0-00 CWE-532
TI-2022-02946 CVE-2022-3191 · GHSA-682g-cr9v-g689

Information Exposure Vulnerability in Hitachi Ops Center Analyzer

Priority LOW 28

Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Analyzer on Linux (Virtual Strage Software Agent component) allows local users to gain sensitive information.

CVSS 3.1MEDIUM 6.6 Local Low privileges No interaction EPSS 0.00181 Published 2022-11-01 Fixed in 10.9.0-00 CWE-532
TI-2020-18804 CVE-2020-36605 · GHSA-rw84-x9xw-mh38

Incorrect default permissions in Hitachi Infrastructure Analytics Advisor

Priority LOW 28

Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component), Hitachi Ops Center Viewpoint…

CVSS 3.1MEDIUM 6.6 Local Low privileges No interaction EPSS 0.00159 Published 2022-11-01 Fixed in 10.9.0-00 CWE-276
Open these records in search →