CVE-2025-5781: Hitachi Configuration Manager

Medium severity, CVSS 5.2. EPSS: 0.1% chance of exploitation in the next 30 days.

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.

Affected products

• Hitachi Configuration Manager: from 8.5.1-00; from 8.5.1-00, before 11.0.5-00 (fixed in 11.0.5-00)
• Hitachi Device Manager: from 8.4.1-00, before 8.6.5-00 (fixed in 8.6.5-00)
• Hitachi Ops Center API Configuration Manager: from 10.0.0-00, before 11.0.5-00 (fixed in 11.0.5-00)

Published 2026-02-25. Last modified 2026-06-17.