CVE-2025-5781

mediumpriority · track · 31EPSS 0.002 · 4 %ileexploit · PoCDEEUJPUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

2 exploits · PoC

Likely / severe?

0.15% (4th) EPSS

CVSS 5.2 · medium

Is it mine?

11 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · cert_bund · nvd

EPSS · scored 2026-10-24

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.

cvss

Technical severity, 0–10. One row per scoring source.

5.2

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.15.2mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:Nprimary · NVD / NIST USexploitability 2 · impact 2.7

v3.15.2mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:Nsecondary · ENISA EU

v3.15.2mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:Nsecondary · hirt@hitachi.co.jpexploitability 2 · impact 2.7

v3.14.9mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N/E:Psecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-532US

exploits (2)

Public proof-of-concept and weaponised exploit code.

affected products (11)

Products and version ranges known to be affected.

Hitachi Configuration Manager <11.0.5-00all versionscert_bundDE
Hitachi Ops Center API Configuration Manager <11.0.5-00all versionscert_bundDE
Hitachi Configuration Manager< 11.0.5-00cert_bundDE
Hitachi Ops Center≤ API Configuration Manager <11.0.5-00cert_bundDE
Hitachi Hitachi Configuration Manager8.5.1-00 → 11.0.5-00enisa_euvdEU
Hitachi Hitachi Device Manager8.4.1-00 → 8.6.5-00enisa_euvdEU
Hitachi Hitachi Ops Center API Configuration Manager10.0.0-00 → 11.0.5-00enisa_euvdEU
hitachi configuration manager≥ 8.5.1-00nvdUScpe:2.3:a:hitachi:configuration_manager:*:*:*:*:*:*:*:*
hitachi configuration manager8.5.1-00 → 11.0.5-00nvdUScpe:2.3:a:hitachi:configuration_manager:*:*:*:*:*:*:*:*
hitachi device manager8.4.1-00 → 8.6.5-00nvdUScpe:2.3:a:hitachi:device_manager:*:*:*:*:*:*:*:*
hitachi ops center api configuration manager10.0.0-00 → 11.0.5-00nvdUScpe:2.3:a:hitachi:ops_center_api_configuration_manager:*:*:*:*:*:*:*:*

advisories (2)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-0512Hitachi Configuration Manager: Schwachstelle ermöglicht Offenlegung von InformationenDeutsch2026-02-24csaf · cert_bundDE
Ein lokaler Angreifer kann eine Schwachstelle in Hitachi Configuration Manager und Hitachi Ops Center ausnutzen, um Informationen offenzulegen.
JVNDB-2026-004810JVN iPedia advisory JVNDB-2026-0048102026-02-26vendor · jvndbJP

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund nvd jvndb NVD CVE.org MITRE

published 2026-02-25modified 2026-06-17

references (3)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan