Browse CVEs

HIGH 7.7 CVE-2026-2253 Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0, including 9.3.x and 8.3.x, does not prevent certain XML p… Vantara Pentaho Data Integration And Analytics 10.2.0.7 / 11.0.0.0+ Fix from $1,9502026-05-27 MEDIUM 6.3 CVE-2026-2254 Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6 and 11.0.0.0, including 9.3.x and 8.3.x, does not apply ACLs on certain… Vantara Pentaho Data Integration And Analytics 10.2.0.7 / 11.0.0.0+ Fix from $1,6002026-05-27 HIGH 7.2 CVE-2025-11159 Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script ex… Vantara Pentaho Data Integration And Analytics 10.2.0.7+ Fix from $1,9502026-05-13 CRITICAL 9.8 CVE-2025-1978 Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G3… Virtual Storage One Block Mitigation only Fix from $2,3002026-05-07 MEDIUM 5.3 CVE-2025-2514 Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350,… Vsp E1090h Firmware Mitigation only Fix from $1,6002026-05-07 CRITICAL 9.8 CVE-2025-9661 OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28. This… Virtual Storage One Block Mitigation only Fix from $2,3002026-05-07 MEDIUM 5.5 CVE-2025-65116 Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job … Job Management Partner 1\/it Desktop Management Manager after 13-01-06 Fix from $1,6002026-04-07 CRITICAL 9.8 CVE-2025-65115 Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows… Job Management Partner 1\/it Desktop Management Manager after 13-01-06 Fix from $2,3002026-04-07 MEDIUM 6.1 CVE-2026-2072 Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor (Analytics probe component), Hitachi Ops Center Analyzer.This issue af… Infrastructure Analytics Advisor 11.0.5-00+ Fix from $1,6002026-03-25 CRITICAL 9.1 CVE-2025-11158 Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6, including 9.3.x and 8.3.x, do not restrict Groovy scripts in new PRPT … Vantara Pentaho Data Integration And Analytics 10.2.0.6+ Fix from $2,3002026-03-10 HIGH 7.5 CVE-2025-0976 Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager.This issue affects Hitachi Ops Cent… Configuration Manager 8.6.1-00 / 11.0.4-00+ Fix from $1,9502026-02-25 MEDIUM 5.2 CVE-2025-5781 Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Sess… Configuration Manager 8.6.5-00 / 11.0.5-00+ Fix from $1,6002026-02-25 HIGH 7.8 CVE-2024-7125 Authentication Bypass vulnerability in Hitachi Ops Center Common Services.This issue affects Hitachi Ops Center Common Services: from 10.9.3-00 befor… Ops Center Common Services 11.0.2-01+ Fix from $1,9502024-08-27 CRITICAL 9.8 CVE-2024-5828 Expression Language Injection vulnerability in Hitachi Tuning Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Tun… Tuning Manager 8.8.7-00+ Fix from $2,3002024-08-06 MEDIUM 6.5 CVE-2024-2819 Incorrect Default Permissions, Improper Preservation of Permissions vulnerability in Hitachi Ops Center Common Services allows File Manipulation.This… Ops Center Common Services 11.0.2-00+ Fix from $1,6002024-07-02 HIGH 8.2 CVE-2024-28982 Hitachi Vantara Pentaho Business Analytics Server versions before 10.1.0.0 and 9.3.0.7, including 8.3.x do not correctly protect the ACL service endp… Pentaho Business Analytics Server 9.3.0.7 / 10.1.0.0+ Fix from $1,9502024-06-26 MEDIUM 6.1 CVE-2024-28983 Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content int… Pentaho Business Analytics Server 9.3.0.7 / 10.1.0.0+ Fix from $1,6002024-06-26 MEDIUM 6.1 CVE-2024-28984 Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content int… Pentaho Business Analytics Server 9.3.0.7 / 10.1.0.0+ Fix from $1,6002024-06-26 MEDIUM 5.3 CVE-2023-5617 Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat w… Vantara Pentaho Data Integration And Analytics 9.3.0.6 / 10.1.0.0+ Fix from $1,6002024-02-28 CRITICAL 9.8 CVE-2024-0715 Expression Language Injection vulnerability in Hitachi Global Link Manager on Windows allows Code Injection.This issue affects Hitachi Global Link Ma… Global Link Manager 8.8.7-03+ Fix from $2,3002024-02-20 HIGH 7.1 CVE-2024-21840 Incorrect Default Permissions vulnerability in Hitachi Storage Plug-in for VMware vCenter allows local users to read and write specific files. This … Storage Plug In 04.10.0+ Fix from $1,9502024-01-30 HIGH 7.5 CVE-2023-49106 Missing Password Field Masking vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Agent component).This issue affects Hitachi … Device Manager 8.8.5-04+ Fix from $1,9502024-01-16 HIGH 7.5 CVE-2023-49107 Generation of Error Message Containing Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Agent modules)… Device Manager 8.8.5-04+ Fix from $1,9502024-01-16 HIGH 7.1 CVE-2023-6457 Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Windows (Hitachi Tuning Manager server component) allows local users to read… Tuning Manager 8.8.5-04+ Fix from $1,9502024-01-16 HIGH 8.8 CVE-2023-3517 Hitachi Vantara Pentaho Data Integration & Analytics versions before 9.5.0.1 and 9.3.0.5, including 8.3.x does not restrict JNDI identifiers during … Pentaho Data Integration And Analytics 9.3.0.5 / 9.5.0.1+ Fix from $1,9502023-12-12 MEDIUM 6.5 CVE-2023-6538 SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in Storage, Se… System Management Unit Firmware 14.8.7825.01+ Fix from $1,6002023-12-11 MEDIUM 6.5 CVE-2023-5808 SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in a Storage a… Vantara Hitachi Network Attached Storage after 14.8.7825.01 Fix from $1,6002023-12-05 HIGH 7.8 CVE-2023-3440 Incorrect Default Permissions vulnerability in Hitachi JP1/Performance Management on Windows allows File Manipulation.This issue affects JP1/Performa… Jp1\/performance Management Mitigation only Fix from $1,9502023-10-03 HIGH 7.5 CVE-2023-3967 Allocation of Resources Without Limits or Throttling vulnerability in Hitachi Ops Center Common Services on Linux allows DoS.This issue affects Hitac… Ops Center Common Services 10.9.3-00+ Fix from $1,9502023-10-03 MEDIUM 5.5 CVE-2023-3335 Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Administrator on Linux allows local users  to gain sensitive inf… Ops Center Administrator 10.9.3-00+ Fix from $1,6002023-10-03