Medium severity · published Feb 25, 2026
CVE-2025-5781
Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue…
5.2
CVSS
0.2%
EPSS
No
On KEV
Description
Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Configuration Manager · Hitachi
8.5.1-00 and later; 8.5.1-00 before 11.0.5-00 · source: NVD
DM
Device Manager · Hitachi
8.4.1-00 before 8.6.5-00 · source: NVD
OC
Ops Center Api Configuration Manager · Hitachi
10.0.0-00 before 11.0.5-00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-5781
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-5781
Vendor Advisory
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-111/index.html
More from Configuration Manager
7.5
CVE-2025-0976
Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager.This issue affects Hitachi Ops Center API Configuration Manager:…