Hitachi vulnerabilities
We track 90 vulnerabilities in Hitachi products across 60+ products. 90 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on November 10, 2026.
Latest Hitachi vulnerabilities
- 7.2 High severity
Hitachi Vantara Pentaho BA Server Special Element Injection Exploited
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream.
- 8.1 High severity
Hitachi Infrastructure Analytics Advisor: Improper Certificate Validation
Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component) allows Man in the Middle Attack.This issue affects Hitachi Infrastru
- 7.1 High severity
Hitachi Ops Center Analyzer: Incorrect Default Permissions
Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID Agent component) allows local users to read and write specific files.This issue affects Hitachi Ops Center Analyzer: from 10.9.0-00 before 1
- 8.8 High severity
Hitachi Storage Plug-in for VMware vCenter: Improper Privilege Management
Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation. This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.9.0 before 04.9.1.
- 8.8 High severity
Hitachi Storage Plug-in for VMware vCenter: Improper Privilege Management
Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation. This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.8.0 before 04.9.1.
- 9.8 Critical severity
Hitachi Infrastructure Analytics Advisor: Server-Side Request Forgery
Server-Side Request Forgery (SSRF) vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Data Center Analytics, Analytics probe components), Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyze
- 8.8 High severity
Hitachi Storage Plug-in for VMware vCenter: Improper Privilege Management
Incorrect Privilege Assignment vulnerability in Hitachi Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation.This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.8.0 before 04.9.0.
- 8.8 High severity
RAID Manager Storage Replication Adapter: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to execute arbitrary OS commands. This issue affects: Hitachi RAID Manager Storage Replication Adapter 02.01.04 versions prior to 02.03.02
- 7.5 High severity
Hc-ip9100hd Firmware: Improper Limitation of a Pathname to a Restricted Directory
Hitachi Kokusai Electric Newtork products for monitoring system (Camera, Decoder and Encoder) and below allows attckers to perform a directory traversal via a crafted GET request to the endpoint /ptippage.cgi. Security information ID hitachi-sec-2022-001 conta
- 7.5 High severity
Hc-ip9100hd Firmware: Missing Authentication for Critical Functionality
An improper authentication for critical function issue in Hitachi Kokusai Electric Network products for monitoring system (Camera, Decoder and Encoder) and bellow allows attckers to remotely reboot the device via a crafted POST request to the endpoint /ptipupg