hitachi Vulnerability Advisory Catalog

Total 201 security vulnerabilities recorded for hitachi software and firmware.

← Back to All Vendors
Component: pentaho_data_integration_and_analytics

Hitachi Vantara Pentaho Data Integration & Analytics versions before 9.5.0.1 and 9.3.0.5, including 8.3.x does not restrict JNDI identifiers during ...

๐Ÿ“… 2023-12-12
CVSS 8.5 Dossier →
Component: system_management_unit_firmware

SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in Storage, Ser...

๐Ÿ“… 2023-12-11
CVSS 7.6 Dossier →
Component: vantara_hitachi_network_attached_storage

SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in a Storage ad...

๐Ÿ“… 2023-12-05
CVSS 7.6 Dossier →
CVE-2023-3967 MEDIUM
Component: ops_center_common_services

Allocation of Resources Without Limits or Throttling vulnerability in Hitachi Ops Center Common Services on Linux allows DoS.This issue affects Hitach...

๐Ÿ“… 2023-10-03
CVSS 5.3 Dossier →
Component: jp1\/performance_management

Incorrect Default Permissions vulnerability in Hitachi JP1/Performance Management on Windows allows File Manipulation.This issue affects JP1/Performan...

๐Ÿ“… 2023-10-03
CVSS 8.4 Dossier →
CVE-2023-3335 MEDIUM
Component: ops_center_administrator

Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Administrator on Linux allows local usersย  to gain sensitive info...

๐Ÿ“… 2023-10-03
CVSS 6.5 Dossier →
CVE-2023-1995 MEDIUM
Component: hirdb_server_with_additional_function

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue aff...

๐Ÿ“… 2023-08-29
CVSS 5.3 Dossier →
Component: eh-view

** UNSUPPORTED WHEN ASSIGNED ** Out-of-bounds Write vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially execute ar...

๐Ÿ“… 2023-08-23
CVSS 7.8 Dossier →
Component: eh-view

** UNSUPPORTED WHEN ASSIGNED ** Out-of-bounds Read vulnerability in Hitachi EH-VIEW (Designer) allows local attackers to potentially disclose informat...

๐Ÿ“… 2023-08-23
CVSS 7.8 Dossier →
Component: eh-view

** UNSUPPORTED WHEN ASSIGNED ** Out-of-bounds Write vulnerability in Hitachi EH-VIEW (Designer) allows local attackers to potentially execute arbitray...

๐Ÿ“… 2023-08-23
CVSS 7.8 Dossier →
Component: eh-view

** UNSUPPORTED WHEN ASSIGNED ** Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Hitachi EH-VIEW (KeypadDesign...

๐Ÿ“… 2023-08-23
CVSS 7.8 Dossier →
Component: device_manager

Improper Validation of Certificate with Host Mismatch vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager...

๐Ÿ“… 2023-07-18
CVSS 5.6 Dossier →
CVE-2023-34142 CRITICAL
Component: device_manager

Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent...

๐Ÿ“… 2023-07-18
CVSS 9.0 Dossier →
Component: replication_manager

Expression Language Injection vulnerability in Hitachi Replication Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi...

๐Ÿ“… 2023-07-18
CVSS 7.3 Dossier →
Component: compute_systems_manager

Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component), Hitachi Tiered Storage Manager on Li...

๐Ÿ“… 2023-07-18
CVSS 6.6 Dossier →
CVE-2023-1158 MEDIUM
Component: vantara_pentaho

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users who are not ...

๐Ÿ“… 2023-05-24
CVSS 4.3 Dossier →
Component: vantara_pentaho

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x deserialize untrusted JSON data without constr...

๐Ÿ“… 2023-05-24
CVSS 8.0 Dossier →
Component: ops_center_analyzer

Cross-site Scripting vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component) allows Reflected XSS.This issue ...

๐Ÿ“… 2023-05-23
CVSS 7.6 Dossier →
CVE-2022-4771 MEDIUM
Component: vantara_pentaho_business_analytics_server

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow a malicious URL to inject content into...

๐Ÿ“… 2023-04-03
CVSS 5.4 Dossier →
CVE-2022-4770 MEDIUM
Component: vantara_pentaho_business_analytics_server

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the full parametrized SQL query in a...

๐Ÿ“… 2023-04-03
CVSS 4.3 Dossier →
CVE-2022-4769 MEDIUM
Component: vantara_pentaho_business_analytics_server

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the target path on host when a file ...

๐Ÿ“… 2023-04-03
CVSS 4.3 Dossier →
Component: vantara_pentaho_business_analytics_server

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly protect the Post Analysis ser...

๐Ÿ“… 2023-04-03
CVSS 7.1 Dossier →
Component: vantara_pentaho_business_analytics_server

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly perform an authorization chec...

๐Ÿ“… 2023-04-03
CVSS 8.8 Dossier →
Component: vantara_pentaho_business_analytics_server

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonic...

๐Ÿ“… 2023-04-03
CVSS 8.6 Dossier →
Page 2 of 9 (201 Total Records)