Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager and Hitachi Configuration Manager
CVE-2025-5781

5.2MEDIUM

Key Information:

Vendor

Hitachi
Status
Hitachi Ops Center Api Configuration Manager
Hitachi Configuration Manager
Hitachi Device Manager
Vendor
CVE Published:
25 February 2026

What is CVE-2025-5781?

An information exposure vulnerability exists in Hitachi's Ops Center API Configuration Manager, Configuration Manager, and Device Manager, which could enable unauthorized session hijacking. This flaw affects multiple product versions, potentially exposing sensitive information to attackers. It is essential for users to address this vulnerability by updating to the latest software versions to mitigate risks associated with unauthorized access.

Affected Version(s)

Hitachi Configuration Manager Windows 8.5.1-00 < 11.0.5-00

Hitachi Device Manager Windows 8.4.1-00 < 8.6.5-00

Hitachi Ops Center API Configuration Manager Windows 10.0.0-00 < 11.0.5-00

References

https://www.hitachi.com/products/it/software/security/inf...
vendor-advisory

CVSS V3.1

Score:
5.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.