CVE-2026-71377Command Argument Injection Vulnerability in Cosminexus Component Container Exploitation status Not known exploited Fix Affected product C Cosminexus Component Container Published 09/08/2026 Severity Critical CVE-2026-71376OS Command Injection Vulnerability in Cosminexus Component Container Exploitation status Not known exploited Fix Affected product C Cosminexus Component Container Published 09/08/2026 Severity Critical CVE-2026-71375XXE Vulnerability in Cosminexus Component Container Exploitation status Not known exploited Fix Affected product C Cosminexus Component Container Published 09/08/2026 Severity High CVE-2026-71374Deserialization of Untrusted Data Vulnerability in Cosminexus Component Container Exploitation status Not known exploited Fix Affected product C Cosminexus Component Container Published 09/08/2026 Severity Critical CVE-2025-2902Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform Exploitation status Not known exploited Fix Affected product H Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H Published 06/29/2026 Severity High CVE-2025-0824lack of validation for firmware update in Hitachi Virtual Storage Exploitation status Not known exploited Fix Affected product H Hitachi Virtual Storage Platform One Block 23, 24, 26, 28 Published 06/29/2026 Severity Low CVE-2025-7386Information exposure vulnerability in Hitachi Storage Navigator Exploitation status Not known exploited Fix Affected product H Hitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 5100H, 5200H, 5500H, 5600H, VX8 Published 06/29/2026 Severity Medium CVE-2025-7737DoS Vulnerability in 10G iSCSI Interface of Hitachi Virtual Storage Platform Exploitation status Not known exploited Fix Affected product H Hitachi Virtual Storage Platform E990, E1090, E1090H Published 06/19/2026 Severity High CVE-2026-2253Hitachi Vantara Pentaho Data Integration & Analytics - Improper Restriction of XML External Entity Reference Exploitation status Not known exploited Fix Affected product P Pentaho Data Integration and Analytics Published 05/27/2026 Severity High CVE-2026-2255Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials Exploitation status Not known exploited Fix Affected product P Pentaho Data Integration and Analytics Published 05/27/2026 Severity Medium CVE-2026-2254Hitachi Vantara Pentaho Data Integration & Analytics - Incorrect Permission Assignment for Critical Resource Exploitation status Not known exploited Fix Affected product P Pentaho Data Integration and Analytics Published 05/27/2026 Severity Medium CVE-2026-3314Missing Password Masking in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpoint Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Analyzer Published 05/26/2026 Severity Medium CVE-2025-11159Hitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party Component Exploitation status Not known exploited Fix Affected product P Pentaho Data Integration and Analytics Published 05/13/2026 Severity Critical CVE-2025-1978Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console Exploitation status Not known exploited Fix Affected product H Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 Published 05/07/2026 Severity High CVE-2025-2514Improper Restriction of Excessive Authentication Attempts vulnerability in Hitachi Virtual Storage Platform Exploitation status Not known exploited Fix Affected product H Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 Published 05/07/2026 Severity Medium CVE-2025-9661OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23/24/26/28 Exploitation status Not known exploited Fix Affected product H Hitachi Virtual Storage Platform One Block 23 Published 05/07/2026 Severity High CVE-2025-65116Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM Exploitation status Not known exploited Fix Affected product J JP1/IT Desktop Management 2 - Manager Published 04/07/2026 Severity Medium CVE-2025-65115Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM Exploitation status Not known exploited Fix Affected product J JP1/IT Desktop Management 2 - Manager Published 04/07/2026 Severity High CVE-2026-2072Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer Exploitation status Not known exploited Fix Affected product H Hitachi Infrastructure Analytics Advisor Published 03/25/2026 Severity High CVE-2026-1166Open Redirect Vulnerability in Hitachi Ops Center Administrator Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Administrator Published 03/25/2026 Severity Medium CVE-2025-11158Hitachi Vantara Pentaho Data Integration & Analytics - Missing Authorization Exploitation status Not known exploited Fix Affected product P Pentaho Data Integration and Analytics Published 03/09/2026 Severity Critical CVE-2025-0976Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center API Configuration Manager Published 02/25/2026 Severity Medium CVE-2025-5781Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center API Configuration Manager Published 02/25/2026 Severity Medium CVE-2025-66444Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer Exploitation status Not known exploited Fix Affected product H Hitachi Infrastructure Analytics Advisor Published 12/24/2025 Severity High CVE-2025-66445Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer Exploitation status Not known exploited Fix Affected product H Hitachi Infrastructure Analytics Advisor Published 12/24/2025 Severity High CVE-2025-3624Missing Authorization Vulnerability in Hitachi Ops Center Analyzer Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Analyzer Published 05/16/2025 Severity Medium CVE-2024-8201Cross-Site WebSocket Hijacking Vulnerability in Hitachi Ops Center Analyzer Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Analyzer Published 05/16/2025 Severity Medium CVE-2025-1531Authentication credentials leakage vulnerability in Hitachi Ops Center Analyzer viewpoint OVF Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Analyzer viewpoint Published 05/16/2025 Severity Medium CVE-2025-1245Bypass Connection Restriction Vulnerability in Hitachi Ops Center Analyzer Exploitation status Not known exploited Fix Affected product H Hitachi Infrastructure Analytics Advisor Published 05/16/2025 Severity Medium CVE-2025-27525Information Exposure vulnerability in JP1/IT Desktop Management 2 - Smart Device Manager Exploitation status Not known exploited Fix Affected product J JP1/IT Desktop Management 2 - Smart Device Manager Published 05/15/2025 Severity Low CVE-2025-27524Weak encryption vulnerability in JP1/IT Desktop Management 2 - Smart Device Manager Exploitation status Not known exploited Fix Affected product J JP1/IT Desktop Management 2 - Smart Device Manager Published 05/15/2025 Severity Medium CVE-2025-27523XXE vulnerability in JP1/IT Desktop Management 2 - Smart Device Manager Exploitation status Not known exploited Fix Affected product J JP1/IT Desktop Management 2 - Smart Device Manager Published 05/15/2025 Severity High CVE-2024-46899Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Common Services Published 04/22/2025 Severity High CVE-2025-2300Information exposure vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center OVA Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Common Services Published 04/22/2025 Severity Medium CVE-2024-57964Insecure Loading of Dynamic Link Libraries in HVAC Energy Saving Program Exploitation status Not known exploited Fix Not confirmed Affected product H HVAC Energy Saving Program Published 02/18/2025 Severity High CVE-2024-57963Insecure Loading of Dynamic Link Libraries in USB-CONVERTERCABLE DRIVER Exploitation status Not known exploited Fix Not confirmed Affected product U USB-CONVERTERCABLE DRIVER Published 02/18/2025 Severity High CVE-2024-10205Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Analyzer Published 12/17/2024 Severity Critical CVE-2024-45068Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center OVA Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Common Services Published 12/03/2024 Severity High CVE-2024-7125Authentication Bypass Vulnerability in Hitachi Ops Center Common Services Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Common Services Published 08/27/2024 Severity High CVE-2024-5828EL Injection Vulnerability in Hitachi Tuning Manager Exploitation status Not known exploited Fix Affected product H Hitachi Tuning Manager Published 08/06/2024 Severity High CVE-2024-5963An unquoted executable path exists in Hitachi Device Manager Exploitation status Not known exploited Fix Affected product H Hitachi Device Manager Published 08/06/2024 Severity Medium CVE-2024-2819File Permission Vulnerability in Hitachi Ops Center Common Services Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Common Services Published 07/02/2024 Severity Medium CVE-2024-4679Folder Permission Vulnerability in JP1/Extensible SNMP Agent Exploitation status Not known exploited Fix Affected product J JP1/Extensible SNMP Agent for Windows Published 07/02/2024 Severity High CVE-2024-28984Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 06/26/2024 Severity High CVE-2024-28983Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 06/26/2024 Severity High CVE-2024-28982Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 06/26/2024 Severity High CVE-2024-22385File and Directory Permission Vulnerability in Hitachi Storage Provider for VMware vCenter Exploitation status Not known exploited Fix Affected product H Hitachi Storage Provider for VMware vCenter Published 06/25/2024 Severity Medium CVE-2024-2493Session Hijacking Vulnerability in Hitachi Ops Center Analyzer Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Analyzer Published 04/23/2024 Severity High CVE-2023-6833Information Exposure Vulnerability in Hitachi Ops Center Administrator Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Administrator Published 04/23/2024 Severity Medium CVE-2022-36407Information Exposure Vulnerability in Hitachi Disk Array Systems Exploitation status Not known exploited Fix Affected product H Hitachi Virtual Storage Platform Published 03/25/2024 Severity Critical CVE-2023-6814Information Exposure Vulnerability in Cosminexus Component Container Exploitation status Not known exploited Fix Affected product C Cosminexus Component Container Published 03/12/2024 Severity Medium CVE-2023-5617Hitachi Vantara Pentaho Data Integration & Analytics - Server-generated Error Message Containing Sensitive Information Exploitation status Not known exploited Fix Affected product P Pentaho Data Integration and Analytics Published 02/28/2024 Severity Medium CVE-2024-0715EL Injection Vulnerability in Hitachi Global Link Manager Exploitation status Not known exploited Fix Affected product H Hitachi Global Link Manager Published 02/20/2024 Severity High CVE-2024-21840Directory and File Permission Vulnerability in Hitachi Storage Plug-in for VMware vCenter Exploitation status Not known exploited Fix Affected product H Hitachi Storage Plug-in for VMware vCenter Published 01/30/2024 Severity High CVE-2023-6457File and Directory Permission Vulnerability in Hitachi Tuning Manager Exploitation status Not known exploited Fix Affected product H Hitachi Tuning Manager Published 01/16/2024 Severity Medium CVE-2023-49107Generation of Error Message Containing Sensitive Information Vulnerability in Hitachi Device Manager Exploitation status Not known exploited Fix Affected product H Hitachi Device Manager Published 01/16/2024 Severity Medium CVE-2023-49106Missing Password Field Masking Vulnerability in Hitachi Device Manager Exploitation status Not known exploited Fix Affected product H Hitachi Device Manager Published 01/16/2024 Severity Medium CVE-2023-3517Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection') Exploitation status Not confirmed Fix Affected product P Pentaho Data Integration and Analytics Published 12/12/2023 Severity High CVE-2023-5808System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products are susceptible to unintended information disclosure via unprivileged access to HNAS configuration backup and diagnostic data. Exploitation status Not known exploited Fix Affected product S System Management Unit (SMU) Published 12/04/2023 Severity High CVE-2023-3440File and Directory Permission Vulnerability in JP1/Performance Management Exploitation status Not confirmed Fix Affected product J JP1/Performance Management - Manager Published 10/03/2023 Severity High CVE-2023-3967DoS Vulnerability in Hitachi Ops Center Common Services Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Common Services Published 10/03/2023 Severity Medium CVE-2023-3335Information Exposure Vulnerability in Hitachi Ops Center Administrator Exploitation status Not confirmed Fix Affected product H Hitachi Ops Center Administrator Published 10/03/2023 Severity Medium CVE-2023-1995Insufficient Logging Vulnerability in HiRDB Exploitation status Not known exploited Fix Affected product H HiRDB Server Published 08/29/2023 Severity Medium CVE-2023-39986Out-of-bounds Read Vulnerability in Hitachi EH-VIEW (Designer) Exploitation status Not known exploited Fix Not confirmed Affected product E EH-VIEW Published 08/23/2023 Severity High CVE-2023-39985Out-of-bounds Write Vulnerability in Hitachi EH-VIEW (Designer) Exploitation status Not known exploited Fix Not confirmed Affected product E EH-VIEW Published 08/23/2023 Severity High CVE-2023-39984Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability in Hitachi EH-VIEW (KeypadDesigner) Exploitation status Not known exploited Fix Not confirmed Affected product E EH-VIEW Published 08/23/2023 Severity High CVE-2023-3495Out-of-bounds Write Vulnerability in Hitachi EH-VIEW (KeypadDesigner) Exploitation status Not known exploited Fix Not confirmed Affected product E EH-VIEW Published 08/23/2023 Severity High CVE-2023-34143Improper Validation of Certificate Vulnerability in Hitachi Device Manager Exploitation status Not known exploited Fix Affected product H Hitachi Device Manager Published 07/18/2023 Severity Medium CVE-2023-34142Cleartext Transmission Vulnerability in Hitachi Device Manager Exploitation status Not known exploited Fix Affected product H Hitachi Device Manager Published 07/18/2023 Severity Critical CVE-2022-4146EL Injection Vulnerability in Hitachi Replication Manager Exploitation status Not known exploited Fix Affected product H Hitachi Replication Manager Published 07/18/2023 Severity High CVE-2020-36695File and Directory Permission Vulnerability in Hitachi Command Suite Exploitation status Not known exploited Fix Affected product H Hitachi Device Manager Published 07/18/2023 Severity Medium CVE-2022-4815Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 05/24/2023 Severity High CVE-2023-1158Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 05/24/2023 Severity Medium CVE-2023-30469Reflrected Cross Site Scripting Vulnerability in Hitachi Ops Center Analyzer Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Analyzer Published 05/23/2023 Severity High CVE-2022-4771Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 04/03/2023 Severity Medium CVE-2022-4770Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 04/03/2023 Severity Medium CVE-2022-4769Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 04/03/2023 Severity Medium CVE-2022-43772Hitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log File Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 04/03/2023 Severity Low CVE-2022-3960Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 04/03/2023 Severity Medium CVE-2022-43941Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 04/03/2023 Severity High CVE-2022-43771Hitachi Vantara Pentaho Business Analytics Server - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 04/03/2023 Severity Medium CVE-2022-43940Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 04/03/2023 Severity High CVE-2022-43939Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions Exploitation status KEV Fix Affected product P Pentaho Business Analytics Server Published 04/03/2023 Severity High CVE-2022-43938Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 04/03/2023 Severity High CVE-2022-43773Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 04/03/2023 Severity High CVE-2022-43769Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) Exploitation status KEV Fix Affected product P Pentaho Business Analytics Server Published 04/03/2023 Severity High CVE-2020-36652File and Directory Permissions Vulnerability in Hitachi Automation Director, Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Exploitation status Not known exploited Fix Affected product H Hitachi Automation Director Published 02/28/2023 Severity Medium CVE-2022-4895Man-in-the-middle attack Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer Exploitation status Not known exploited Fix Affected product H Hitachi Infrastructure Analytics Advisor Published 02/28/2023 Severity High CVE-2022-3884Directory Permission Vulnerability in Hitachi Ops Center Analyzer Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Analyzer Published 02/28/2023 Severity High CVE-2022-4441Privilege Escalation Vulnerability in Hitachi Storage Plug-in for VMware vCenter Exploitation status Not known exploited Fix Affected product H Hitachi Storage Plug-in for VMware vCenter Published 01/31/2023 Severity High CVE-2022-4041Privilege Escalation Vulnerability in Hitachi Storage Plug-in for VMware vCenter Exploitation status Not known exploited Fix Affected product H Hitachi Storage Plug-in for VMware vCenter Published 01/31/2023 Severity Medium CVE-2020-36611File and Directory Permission Vulnerability in Hitachi Tuning Manager Exploitation status Not known exploited Fix Affected product H Hitachi Tuning Manager Published 01/17/2023 Severity Medium CVE-2021-4266Webdetails cpf DependenciesPackage.java cross site scripting Exploitation status Not known exploited Fix Not confirmed Affected product C cpf Published 12/21/2022 Severity Low CVE-2022-34881Information Exposure Vulnerability in JP1/Automatic Operation Exploitation status Not known exploited Fix Affected product J JP1/Automatic Operation Published 12/06/2022 Severity Low CVE-2021-45448Pentaho Business Analytics Server - Pentaho Analyzer plugin exposes a service endpoint for templates which allows a user supplied path to access resources that are out of bounds. Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 11/02/2022 Severity High CVE-2021-45447Pentaho Business Analytics Server - With the Data Lineage feature enabled, the system transmits database passwords in clear text Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 11/02/2022 Severity High CVE-2021-45446Pentaho Business Analytics Server - Exposure of Information Through Directory Listing Exploitation status Not known exploited Fix Affected product P Pentaho Business Analytics Server Published 11/02/2022 Severity Medium CVE-2022-41553Information Exposure Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer Exploitation status Not known exploited Fix Affected product H Hitachi Infrastructure Analytics Advisor Published 11/01/2022 Severity Medium CVE-2022-41552Server-Side Request Forgery Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer Exploitation status Not known exploited Fix Affected product H Hitachi Infrastructure Analytics Advisor Published 11/01/2022 Severity Critical CVE-2022-3191Information Exposure Vulnerability in Hitachi Ops Center Analyzer Exploitation status Not known exploited Fix Affected product H Hitachi Ops Center Analyzer Published 11/01/2022 Severity Medium 
.svg){kind=icon}
