Vulnerability · Published Feb 25, 2026 · Assigned by Hitachi
CVE-2025-5781Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager
Medium 5.2
In plain English
A medium-severity sensitive data in logs in Hitachi Configuration Manager from Hitachi. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hitachi | Hitachi Ops Center API Configuration Manager | 10.0.0-00 – before 11.0.5-00 |
| Hitachi | Hitachi Configuration Manager | 8.5.1-00 – before 11.0.5-00 |
| Hitachi | Hitachi Device Manager | 8.4.1-00 – before 8.6.5-00 |
Weakness: CWE-532 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N