CVE Feed

    Dashboard / CVE / CVE-2025-66444

    CVE-2025-66444

    Cross-site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component) and Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component).This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.5-00.

    Published:Dec 24, 2025
    Last Modified:Apr 15, 2026
    EPS:Dec 24, 2025
    EPSS Score:0.00054
    CVSS Score:8.2

    Affected Products

    Vendor
    Hitachi
    Product
    Infrastructure Analytics Advisor
    Vendor
    Hitachi
    Product
    Ops Center Analyzer

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-3314 (CVSS 4.6) — Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detai…
    CVE-2026-2072 (CVSS 8.2) — Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor (Analytics probe component), Hi…
    CVE-2025-66445 (CVSS 7.1) — Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics componen…
    CVE-2025-1245 (CVSS 6.5) — Bypass Connection Restriction vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics…
    CVE-2024-10205 (CVSS 9.4) — Authentication Bypass vulnerability in Hitachi Ops Center Analyzer on Linux, 64 bit (Hitachi Ops Center Analyz…
    CVE-2020-36652 (CVSS 6.6) — Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure An…
    CVE-2022-4895 (CVSS 8.6) — Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics …
    CVE-2022-41553 (CVSS 6.5) — Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advis…
    CVE-2022-41552 (CVSS 9.8) — Server-Side Request Forgery (SSRF) vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Data Ce…
    CVE-2020-36605 (CVSS 6.6) — Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics pr…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High