CVE-2025-5781

Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager

CVSS 5.2 MEDIUMEPSS 0.1%CWE-532

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.2EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Lifecycle

25 Feb 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Affected products

Hitachi · Hitachi Configuration Manager Hitachi · Hitachi Device Manager Hitachi · Hitachi Ops Center API Configuration Manager

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-111/index.html