Hitachi vulnerabilities
233 vulnerabilities
Known vulnerabilities in Hitachi products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 341 products.
Products
50 of 341- Device Manager17 vulnerabilities
- Hitachi Ops Center Analyzer17 vulnerabilities
- Vantara Pentaho16 vulnerabilities
- Vantara Pentaho Business Analytics Server14 vulnerabilities
- Hitachi Infrastructure Analytics Advisor11 vulnerabilities
- Tuning Manager10 vulnerabilities
- Ucosminexus Service Platform10 vulnerabilities
- Ops Center Analyzer9 vulnerabilities
- Ucosminexus Application Server Enterprise8 vulnerabilities
- Ucosminexus Application Server Standard8 vulnerabilities
- Hitachi Device Manager7 vulnerabilities
- Infrastructure Analytics Advisor7 vulnerabilities
- Replication Manager7 vulnerabilities
- Compute Systems Manager6 vulnerabilities
- Cosminexus Application Server6 vulnerabilities
- Cosminexus Component Container6 vulnerabilities
- Cosminexus Server6 vulnerabilities
- Groupmax Collaboration Portal6 vulnerabilities
- Groupmax Collaboration Web Client6 vulnerabilities
- Hitachi Ops Center Common Services6 vulnerabilities
- It Operations Director6 vulnerabilities
- Tiered Storage Manager6 vulnerabilities
- Vantara Pentaho Data Integration And Analytics6 vulnerabilities
- Business Logic5 vulnerabilities
- Ip5000 Voip Wifi Phone5 vulnerabilities
- Job Management Partner 1\/It Desktop Management Manager5 vulnerabilities
- Ucosminexus Service Architect5 vulnerabilities
- Cosminexus Application Server Enterprise4 vulnerabilities
- Cosminexus Application Server Standard4 vulnerabilities
- Eh View4 vulnerabilities
- Hitachi Ops Center Administrator4 vulnerabilities
- Hitachi Storage Plug In For Vmware Vcenter4 vulnerabilities
- Hitachi Tuning Manager4 vulnerabilities
- Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H4 vulnerabilities
- Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F9004 vulnerabilities
- Job Management Partner 1\/Software Distribution Client4 vulnerabilities
- Job Management Partner 1\/Software Distribution Manager4 vulnerabilities
- Jp1\/It Desktop Management 2 Manager4 vulnerabilities
- Jp1\/It Desktop Management 2 Operations Director4 vulnerabilities
- Linkone4 vulnerabilities
- Storage Plug In4 vulnerabilities
- Ucosminexus Developer Standard4 vulnerabilities
- Vantara Pentaho Business Intelligence Server4 vulnerabilities
- Automation Director3 vulnerabilities
- Cosminexus Collaboration Portal3 vulnerabilities
- Cosminexus Developer3 vulnerabilities
- Global Link Manager3 vulnerabilities
- Groupmax World Wide Web Desktop3 vulnerabilities
- Jp1 File Transmission Server3 vulnerabilities
- Jp1 Cm2 Network Node Manager 2503 vulnerabilities
CVE-2026-86607hitachihitachi ops center administrator
EPSS score0.23%
Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator.
This issue affects Hitachi Ops Center Administrator: before 11.0.9-01.CVE-2026-86573hitachihitachi disk array driver for aix+1EPSS score0.13%
Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.
This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A.CVE-2026-82715hitachihitachi disk array driver for aix+1EPSS score0.12%
Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.
This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A.CVE-2018-21026hitachicompute_systems_manager+4EPSS score1.38%
A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.6.5-00 allows an unauthenticated remote user to read internal information.CVE-2018-21032hitachiautomation_director+2EPSS score0.87%
A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to 8.5.0-00 allow authenticated remote users to expose technical information through error messages. Hitachi Command Suite includes Hitachi Device Manager and Hitachi Compute Systems Manager.CVE-2018-21033hitachiautomation_director+7EPSS score0.84%
A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets (CSS) token sequence. Hitachi Command Suite includes Hitachi Device Manager, Hitachi Tiered Storage Manager, Hitachi Replication Manager, Hitachi Tuning Manager, Hitachi Global Link Manager and Hitachi Compute Systems Manager.CVE-2018-14735hitachicommand_suite+5EPSS score1.35%
An Information Exposure issue was discovered in Hitachi Command Suite 8.5.3. A remote attacker may be able to exploit a flaw in the permission of messaging that may allow for information exposure via a crafted message.CVE-2003-0564hitachigroupmax_mail_-_security_optionEPSS score8.56%
Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions (S/MIME) protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected ASN.1 constructs, as demonstrated using the NISSC test suite.CVE-2013-4697hitachiit_operations_director+2EPSS score1.93%
Multiple unspecified vulnerabilities in Hitachi JP1/IT Desktop Management - Manager 09-50 through 09-50-03, 09-51 through 09-51-05, 10-00 through 10-00-02, and 10-01 through 10-01-02; Hitachi Job Management Partner 1/IT Desktop Management - Manager 09-50 through 09-50-03 and 10-01; and Hitachi IT Operations Director 02-50 through 02-50-07, 03-00 through 03-00-12, and 04-00 through 04-00-01 allow remote authenticated users to gain privileges via unknown vectors.CVE-2021-40337hitachi energylinkone+1EPSS score0.40%
Cross-site Scripting (XSS) vulnerability in Hitachi Energy LinkOne allows an attacker that manages to exploit the vulnerability can take advantage to exploit multiple web attacks and stole sensitive information. This issue affects: Hitachi Energy LinkOne 3.20; 3.22; 3.23; 3.24; 3.25; 3.26.CVE-2021-40339hitachilinkoneEPSS score0.73%
Configuration vulnerability in Hitachi Energy LinkOne application due to the lack of HTTP Headers, allows an attacker that manages to exploit this vulnerability to retrieve sensitive information. This issue affects: Hitachi Energy LinkOne 3.20; 3.22; 3.23; 3.24; 3.25; 3.26.CVE-2021-40340hitachilinkoneEPSS score0.73%
Information Exposure vulnerability in Hitachi Energy LinkOne application, due to a misconfiguration in the ASP server exposes server and ASP.net information, an attacker that manages to exploit this vulnerability can use the exposed information as a reconnaissance for further exploitation. This issue affects: Hitachi Energy LinkOne 3.20; 3.22; 3.23; 3.24; 3.25; 3.26.CVE-2021-40338hitachilinkoneEPSS score0.67%
Hitachi Energy LinkOne product, has a vulnerability due to a web server misconfiguration, that enables debug mode and reveals the full path of the filesystem directory when an attacker generates errors during a query operation. This issue affects: Hitachi Energy LinkOne 3.20; 3.22; 3.23; 3.24; 3.25; 3.26.CVE-2021-41573hitachicontent_platform_anywhereEPSS score0.82%
Hitachi Content Platform Anywhere (HCP-AW) 4.4.5 and later allows information disclosure. If authenticated user creates a link to a file or folder while the system was running version 4.3.x or earlier and then shares the link and then later deletes the file or folder without deleting the link and before the link expires. If the system has been upgraded to version 4.4.5 or 4.5.0 a malicious user with the link could browse and download all files of the authenticated user that created the link .CVE-2021-20741hitachiapplication_server_v10_manual+1EPSS score0.75%
Cross-site scripting vulnerability in Hitachi Application Server Help (Hitachi Application Server V10 Manual (Windows) version 10-11-01 and earlier and Hitachi Application Server V10 Manual (UNIX) version 10-11-01 and earlier) allows a remote attacker to inject an arbitrary script via unspecified vectors.CVE-2021-20740hitachi and nec corporationhitachi virtual file platform and nec storage m series nas gateway which uses hitachi virtual file platform+7EPSS score3.11%
Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Gateway Nh4a/Nh8a versions prior to FOS 5.5.3-08(NEC2.5.4a) and Nh4b/Nh8b, Nh4c/Nh8c versions prior to FOS 6.4.3-08(NEC3.4.2) allow remote authenticated attackers to execute arbitrary OS commands with root privileges via unspecified vectors.CVE-2021-31599hitachivantara_pentaho+1EPSS score2.34%
An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. A reports (.prpt) file allows the inclusion of BeanShell scripts to ease the production of complex reports. An authenticated user can run arbitrary code.CVE-2021-31602hitachivantara_pentaho+1EPSS score51.65%
An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The Security Model has different layers of Access Control. One of these layers is the applicationContext security, which is defined in the applicationContext-spring-security.xml file. The default configuration allows an unauthenticated user with no previous knowledge of the platform settings to extract pieces of information without possessing valid credentials.CVE-2021-31601hitachivantara_pentaho+1EPSS score1.35%
An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. They implement a series of web services using the SOAP protocol to allow scripting interaction with the backend server. An authenticated user (regardless of privileges) can list all databases connection details and credentials.CVE-2021-31600hitachivantara_pentaho+1EPSS score0.98%
An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. They implement a series of web services using the SOAP protocol to allow scripting interaction with the backend server. An authenticated user (regardless of privileges) can list all valid usernames.