Insufficient Logging Vulnerability in HiRDB
Priority LOW 33CWE-778Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before 10-06-02; HiRDB Server With Addtional Function: before 09-60-2M, before 09-65-/W , before 09-66-/Q ; HiRDB Structured Data Access Facility: before 09-60-39, before 10-03-12, before 10-04-06, before 10-06-02.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00456 39th percentileScored 2026-11-07
Fix Fixed HiRDB Server (Hitachi): 09-60-39, 09-65-23, 09-66-17 +5HiRDB Server With Addtional Function (Hitachi): 09-60-2M, 09-65-/W, 09-66-/Q+1 more product
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Hitachi | HiRDB Server | 07-03 to before 09-60; 09-60 to before 09-60-39; 09-65 to before 09-65-23; 09-66 to before 09-66-17; 10-00 and later; 10-01 to before 10-01-10; 10-02 and later; 10-03 to before 10-03-12; 10-04 to before 10-04-06; 10-05 to before 10-05-06; 10-06 to before 10-06-02 | 09-60-39, 09-65-23, 09-66-17, 10-01-10, 10-03-12, 10-04-06, 10-05-06, 10-06-02 | Patch available | CNA |
| Hitachi | HiRDB Server With Addtional Function | 07-03 to before 09-60; 09-60 to before 09-60-2M; 09-65 to before 09-65-/W; 09-66 to before 09-66-/Q | 09-60-2M, 09-65-/W, 09-66-/Q | Patch available | CNA |
| Hitachi | HiRDB Structured Data Access Facility | 07-03 to before 09-60; 09-60 to before 09-60-39; 09-65 and later; 09-66 and later; 10-00 and later; 10-01 and later; 10-02 and later; 10-03 to before 10-03-12; 10-04 to before 10-04-06; 10-05 and later; 10-06 to before 10-06-02 | 09-60-39, 10-03-12, 10-04-06, 10-06-02 | Patch available | CNA |
- HiRDB Server VendorHitachi Affected 07-03 to before 09-60; 09-60 to before 09-60-39; 09-65 to before 09-65-23; 09-66 to before 09-66-17; 10-00 and later; 10-01 to before 10-01-10; 10-02 and later; 10-03 to before 10-03-12; 10-04 to before 10-04-06; 10-05 to before 10-05-06; 10-06 to before 10-06-02 Fixed in 09-60-39, 09-65-23, 09-66-17, 10-01-10, 10-03-12, 10-04-06, 10-05-06, 10-06-02 Patch available CNA
- HiRDB Server With Addtional Function VendorHitachi Affected 07-03 to before 09-60; 09-60 to before 09-60-2M; 09-65 to before 09-65-/W; 09-66 to before 09-66-/Q Fixed in 09-60-2M, 09-65-/W, 09-66-/Q Patch available CNA
- HiRDB Structured Data Access Facility VendorHitachi Affected 07-03 to before 09-60; 09-60 to before 09-60-39; 09-65 and later; 09-66 and later; 10-00 and later; 10-01 and later; 10-02 and later; 10-03 to before 10-03-12; 10-04 to before 10-04-06; 10-05 and later; 10-06 to before 10-06-02 Fixed in 09-60-39, 10-03-12, 10-04-06, 10-06-02 Patch available CNA
CPE configurations NVD · 10
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:hitachi:hirdb_server_with_additional_function:*:*:*:*:*:*:*:* | 09-00 – 09-00-2d; 09-01 – 09-01-\/x; 09-02 – 09-02-2f; 09-03 – 09-03-2a; 09-04 – 09-04-2s; 09-50 – 09-50-2k; 09-60 – 09-60-2k; 09-65 – 09-65-\/v; 09-66 – 09-66-\/p | Vulnerable | Hitachi |
| cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Linux |
| cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:a:hitachi:hirdb_server_with_additional_function:*:*:*:*:*:*:*:* | 09-00 – 09-00-2f; 09-03 – 09-03-2e; 09-60 – 09-60-2l | Vulnerable | Hitachi |
| cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:* | not specified by NVD | Running on | IBM |
| cpe:2.3:a:hitachi:hirdb_structured_data_access_facility:*:*:*:*:*:*:*:* | 09-60 – 09-60-37; 09-66 – 09-66-06; 10-01 – 10-01-03; 10-02 – 10-02-12; 10-03 – 10-03-10; 10-04 – 10-04-05; 10-06 – 10-06-01 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:hirdb_server:*:*:*:*:*:*:*:* | 09-00 – 09-00-30; 09-01 – 09-01-24; 09-02 – 09-02-32; 09-03 – 09-03-27; 09-04 – 09-04-31 | Vulnerable | Hitachi |
| cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Oracle |
| cpe:2.3:a:hitachi:hirdb_server:*:*:*:*:*:*:*:* | 09-00 – 09-00-32; 09-03 – 09-03-31; 09-04 – 09-04-45; 09-50 – 09-50-37; 09-60 – 09-60-38; 09-65 – 09-65-22; 09-66 – 09-66-16; 10-00 – 10-00-09; 10-01 – 10-01-09; 10-02 – 10-02-12; 10-03 – 10-03-11; 10-04 – 10-04-04; 10-05 – 10-05-05; 10-06 – 10-06-01; 10-03 – 10-03-10; 10-04 – 10-04-05; 09-60 – 09-60-37 | Vulnerable | Hitachi |
- cpe:2.3:a:hitachi:hirdb_server_with_additional_function:*:*:*:*:*:*:*:* Versions 09-00 – 09-00-2d; 09-01 – 09-01-\/x; 09-02 – 09-02-2f; 09-03 – 09-03-2a; 09-04 – 09-04-2s; 09-50 – 09-50-2k; 09-60 – 09-60-2k; 09-65 – 09-65-\/v; 09-66 – 09-66-\/p Vulnerable ·Hitachi
- cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux
- cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:a:hitachi:hirdb_server_with_additional_function:*:*:*:*:*:*:*:* Versions 09-00 – 09-00-2f; 09-03 – 09-03-2e; 09-60 – 09-60-2l Vulnerable ·Hitachi
- cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
- cpe:2.3:a:hitachi:hirdb_structured_data_access_facility:*:*:*:*:*:*:*:* Versions 09-60 – 09-60-37; 09-66 – 09-66-06; 10-01 – 10-01-03; 10-02 – 10-02-12; 10-03 – 10-03-10; 10-04 – 10-04-05; 10-06 – 10-06-01 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:hirdb_server:*:*:*:*:*:*:*:* Versions 09-00 – 09-00-30; 09-01 – 09-01-24; 09-02 – 09-02-32; 09-03 – 09-03-27; 09-04 – 09-04-31 Vulnerable ·Hitachi
- cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Oracle
- cpe:2.3:a:hitachi:hirdb_server:*:*:*:*:*:*:*:* Versions 09-00 – 09-00-32; 09-03 – 09-03-31; 09-04 – 09-04-45; 09-50 – 09-50-37; 09-60 – 09-60-38; 09-65 – 09-65-22; 09-66 – 09-66-16; 10-00 – 10-00-09; 10-01 – 10-01-09; 10-02 – 10-02-12; 10-03 – 10-03-11; 10-04 – 10-04-04; 10-05 – 10-05-05; 10-06 – 10-06-01; 10-03 – 10-03-10; 10-04 – 10-04-05; 09-60 – 09-60-37 Vulnerable ·Hitachi
Remediation
- Fix · CNA HiRDB Server (Hitachi) Fixed in 09-60-39, 09-65-23, 09-66-17, 10-01-10, 10-03-12, 10-04-06, 10-05-06, 10-06-02
- Fix · CNA HiRDB Server With Addtional Function (Hitachi) Fixed in 09-60-2M, 09-65-/W, 09-66-/Q
- Fix · CNA HiRDB Structured Data Access Facility (Hitachi) Fixed in 09-60-39, 10-03-12, 10-04-06, 10-06-02
Timeline
- 2026-10-02 Threatist record created from CVE-2023-1995
- 2026-10-03 Alias added: GHSA-jjqj-c2cj-f4jp
References
Sources
- CVE-2023-1995 · CVE Program
- CVE-2023-1995 · NVD
- FIRST EPSS
- GHSA-jjqj-c2cj-f4jp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences