hitachi Vulnerability Advisory Catalog

Total 201 security vulnerabilities recorded for hitachi software and firmware.

← Back to All Vendors
CVE-2026-2255 MEDIUM
Component: vantara_pentaho_data_integration_and_analytics

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6 and 11.0.0.0, including 9.3.x and 8.3.x, expose Hadoop cluster credentia...

📅 2026-05-27
CVSS 4.3 Dossier →
CVE-2026-2254 MEDIUM
Component: vantara_pentaho_data_integration_and_analytics

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6 and 11.0.0.0, including 9.3.x and 8.3.x, does not apply ACLs on certain ...

📅 2026-05-27
CVSS 6.3 Dossier →
Component: vantara_pentaho_data_integration_and_analytics

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0, including 9.3.x and 8.3.x, does not prevent certain XML pa...

📅 2026-05-27
CVSS 7.7 Dossier →
CVE-2025-11159 CRITICAL
Component: vantara_pentaho_data_integration_and_analytics

Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script exe...

📅 2026-05-13
CVSS 9.1 Dossier →
CVE-2025-2514 MEDIUM
Component: vsp_e1090h_firmware

Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, ...

📅 2026-05-07
CVSS 5.3 Dossier →
Component: virtual_storage_one_block

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G37...

📅 2026-05-07
CVSS 8.3 Dossier →
Component: virtual_storage_one_block

OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28. This ...

📅 2026-05-07
CVSS 8.1 Dossier →
Component: job_management_partner_1\/it_desktop_management-manager

Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job M...

📅 2026-04-07
CVSS 5.5 Dossier →
Component: job_management_partner_1\/it_desktop_management-manager

Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows,...

📅 2026-04-07
CVSS 8.8 Dossier →
CVE-2025-11158 CRITICAL
Component: vantara_pentaho_data_integration_and_analytics

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6, including 9.3.x and 8.3.x, do not restrict Groovy scripts in new PRPT r...

📅 2026-03-10
CVSS 9.1 Dossier →
CVE-2025-0976 MEDIUM
Component: configuration_manager

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager.This issue affects Hitachi Ops Cente...

📅 2026-02-25
CVSS 4.7 Dossier →
CVE-2025-5781 MEDIUM
Component: configuration_manager

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Sessi...

📅 2026-02-25
CVSS 5.2 Dossier →
Component: ops_center_common_services

Authentication Bypass vulnerability in Hitachi Ops Center Common Services.This issue affects Hitachi Ops Center Common Services: from 10.9.3-00 before...

📅 2024-08-27
CVSS 7.8 Dossier →
Component: tuning_manager

Expression Language Injection vulnerability in Hitachi Tuning Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Tuni...

📅 2024-08-06
CVSS 8.6 Dossier →
CVE-2024-2819 MEDIUM
Component: ops_center_common_services

Incorrect Default Permissions, Improper Preservation of Permissions vulnerability in Hitachi Ops Center Common Services allows File Manipulation.This ...

📅 2024-07-02
CVSS 5.1 Dossier →
Component: pentaho_business_analytics_server

Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content into...

📅 2024-06-26
CVSS 8.8 Dossier →
Component: pentaho_business_analytics_server

Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content into...

📅 2024-06-26
CVSS 8.8 Dossier →
Component: pentaho_business_analytics_server

Hitachi Vantara Pentaho Business Analytics Server versions before 10.1.0.0 and 9.3.0.7, including 8.3.x do not correctly protect the ACL service endpo...

📅 2024-06-26
CVSS 7.1 Dossier →
CVE-2023-5617 MEDIUM
Component: vantara_pentaho_data_integration_and_analytics

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat w...

📅 2024-02-28
CVSS 5.3 Dossier →
Component: global_link_manager

Expression Language Injection vulnerability in Hitachi Global Link Manager on Windows allows Code Injection.This issue affects Hitachi Global Link Man...

📅 2024-02-20
CVSS 7.6 Dossier →
Component: storage_plug-in

Incorrect Default Permissions vulnerability in Hitachi Storage Plug-in for VMware vCenter allows local users to read and write specific files. This i...

📅 2024-01-30
CVSS 7.9 Dossier →
CVE-2023-6457 MEDIUM
Component: tuning_manager

Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Windows (Hitachi Tuning Manager server component) allows local users to read ...

📅 2024-01-16
CVSS 6.6 Dossier →
Component: device_manager

Generation of Error Message Containing Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Agent modules)....

📅 2024-01-16
CVSS 5.3 Dossier →
Component: device_manager

Missing Password Field Masking vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Agent component).This issue affects Hitachi D...

📅 2024-01-16
CVSS 4.6 Dossier →
Page 1 of 9 (201 Total Records)