CVE-2015-1565: hitachi compute_systems_manager Cross-site Scripting
Vulnerability summary
CVE-2015-1565 is a medium (CVSS 4.3) Cross-site Scripting vulnerability in hitachi compute_systems_manager. EPSS estimates a 1.15% chance of exploitation in the next 30 days, higher than 66.3% of scored vulnerabilities.
Timeline
- 09-02-2015PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.15%
Chance of exploitation in the next 30 days
Percentile
66%
Versus all other CVEs
30-day change
0.00 pp
From 1.15% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Hitachi5 products
- compute_systems_manager≤ 7.6.1 | 8.0.0 | 8.1.0 | 8.1.1
- device_manager≤ 8.1.1
- global_link_manager≤ 8.1.1
- replication_manager≤ 8.1.1
- tiered_storage_manager≤ 8.1.1
1 vendor · 5 products
References
3 links- www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS15-001/index.htmlX Refsource CONFIRMVendor Advisory