Skip to content
Noroxi

Hitachi records

214 published records for vendor hitachi.

Researcher profile

Entered KEV
2 · 0.9%
Weaponized
2 · 0.9%
Pre-auth RCE
26
With a fix record
35%
Median publish → KEV
700 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

214 records
  • CVE-2022-43939
    97Now

    Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions

    CriticalCVSS 9.8KEVWeaponizedEPSS 92%

    hitachi · vantara pentaho business analytics serverApr 3, 2023

  • CVE-2022-43769
    87Now

    Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

    HighCVSS 7.2KEVWeaponizedEPSS 97%

    hitachi · vantara pentaho business analytics serverApr 3, 2023

  • CVE-2005-0356
    45Plan

    Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attacke

    MediumCVSS 5.0Proof of conceptEPSS 82%

    cisco · agent desktopMay 31, 2005

  • CVE-2021-31602
    45Plan

    An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x.

    HighCVSS 7.5Proof of conceptEPSS 51%

    hitachi · vantara pentahoNov 8, 2021

  • CVE-2022-43938
    43Plan

    Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')

    HighCVSS 8.8No exploitEPSS 26%

    hitachi · vantara pentaho business analytics serverApr 3, 2023

  • CVE-2022-43773
    42Plan

    Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource

    HighCVSS 8.8No exploitEPSS 22%

    hitachi · vantara pentaho business analytics serverApr 3, 2023

  • CVE-2006-6713
    42Plan

    Buffer overflow in Hitachi Directory Server 2 P-2444-A124 before 02-11-/K on Windows, and P-1B44-A121 before 02-10-/V on HP-UX, allows remot

    CriticalCVSS 10.0No exploitEPSS 5%

    hitachi · hitachi directory server 2Dec 22, 2006

  • CVE-2007-4758
    42Plan

    Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attacke

    CriticalCVSS 10.0No exploitEPSS 5%

    hitachi · ucosminexus application server enterpriseSep 8, 2007

  • CVE-2010-4773
    42Plan

    Unspecified vulnerability in Hitachi EUR Form Client before 05-10 -/D 2010.11.15 and 05-10-CA (* 2) 2010.11.15; Hitachi EUR Form Service bef

    CriticalCVSS 10.0No exploitEPSS 5%

    hitachi · eur form clientMar 23, 2011

  • CVE-2021-34684
    41Plan

    Hitachi Vantara Pentaho Business Analytics through 9.1 allows an unauthenticated user to execute arbitrary SQL queries on any Pentaho data s

    CriticalCVSS 9.8No exploitEPSS 5%

    hitachi · vantara pentahoNov 8, 2021

  • CVE-2007-1093
    41Plan

    Multiple unspecified vulnerabilities in JP1/Cm2/Network Node Manager (NNM) before 07-10-05, and before 08-00-02 in the 08-x series, allow re

    CriticalCVSS 10.0No exploitEPSS 4%

    hitachi · hi ux we2Feb 26, 2007

  • CVE-2012-0918
    41Plan

    Unspecified vulnerability in Hitachi COBOL2002 Net Developer, Net Server Suite, and Net Client Suite 01-00, 01-01 through 01-01-/D, 01-02 th

    CriticalCVSS 10.0No exploitEPSS 4%

    hitachi · cobol2002 net developerJan 24, 2012

  • CVE-2009-3169
    41Plan

    Multiple unspecified vulnerabilities in Hitachi JP1/File Transmission Server/FTP before 09-00 allow remote attackers to execute arbitrary co

    CriticalCVSS 10.0No exploitEPSS 3%

    hitachi · jp1 file transmission serverSep 11, 2009

  • CVE-2012-4274
    41Plan

    Unspecified vulnerability in Hitachi Cobol GUI Option 06-00, 06-01 through 06-01-/A, 07-00, 07-01 before 07-01-/B, and 08-00 before 08-00-/B

    CriticalCVSS 10.0No exploitEPSS 3%

    hitachi · cobol gui optionAug 13, 2012

  • CVE-2007-3794
    41Plan

    Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and t

    CriticalCVSS 10.0No exploitEPSS 2%

    hitachi · cosminexus application serverJul 15, 2007

  • CVE-2004-2421
    41Plan

    Unknown vulnerability in Hitachi Job Management Partner (JP1) JP1/File Transmission Server/FTP 6 and 7, when running on HP-UX in trusted mod

    CriticalCVSS 10.0No exploitEPSS 1%

    hitachi · jp1 p-1b41-9461Dec 31, 2004

  • CVE-2021-29644
    40Plan

    Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow.

    CriticalCVSS 9.8No exploitEPSS 2%

    hitachi · it operations directorOct 12, 2021

  • CVE-2017-9294
    40Plan

    RMI vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to execute internal commands without authentication via

    CriticalCVSS 9.8No exploitEPSS 2%

    hitachi · device managerMay 29, 2017

  • CVE-2025-9661
    39Monitor

    OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23/24/26/28

    CriticalCVSS 9.8No exploitEPSS 0%

    hitachi · virtual storage one blockMay 7, 2026

  • CVE-2022-41552
    39Monitor

    Server-Side Request Forgery Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer

    CriticalCVSS 9.8No exploitEPSS 0%

    hitachi · infrastructure analytics advisorOct 31, 2022

  • CVE-2025-65115
    39Monitor

    Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM

    CriticalCVSS 9.8No exploitEPSS 0%

    hitachi · job management partner 1\/it desktop management-managerApr 7, 2026

  • CVE-2025-1978
    39Monitor

    Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console

    CriticalCVSS 9.8No exploitEPSS 0%

    hitachi · virtual storage one blockMay 7, 2026

  • CVE-2022-4146
    39Monitor

    EL Injection Vulnerability in Hitachi Replication Manager

    CriticalCVSS 9.8No exploitEPSS 0%

    hitachi · replication managerJul 17, 2023

  • CVE-2024-0715
    39Monitor

    EL Injection Vulnerability in Hitachi Global Link Manager

    CriticalCVSS 9.8No exploitEPSS 0%

    hitachi · global link managerFeb 19, 2024

  • CVE-2024-5828
    39Monitor

    EL Injection Vulnerability in Hitachi Tuning Manager

    CriticalCVSS 9.8No exploitEPSS 0%

    hitachi · tuning managerAug 5, 2024