{"id":"CVE-2025-5781","aliases":["EUVD-2025-208107","GHSA-3pm4-mcqw-jq89"],"status":"published","title":"Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager","description":"Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.","severity":{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0015,"percentile":0.04186,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-532"],"published":"2026-02-25T03:01:21Z","modified":"2026-06-17T09:48:44Z","exploits":[{"source":"pocgithub","id":"iamrajkumar1995/cve-2025-5781_FreePBX","title":"iamrajkumar1995/cve-2025-5781_FreePBX","date":"2026-08-16","url":"https://github.com/iamrajkumar1995/cve-2025-5781_FreePBX"},{"source":"pocgithub","id":"jasonbernier/CVE-2025-5781","title":"jasonbernier/CVE-2025-5781","date":"2026-08-11","url":"https://github.com/jasonbernier/CVE-2025-5781"}],"products":[{"vendor":"hitachi","product":"configuration_manager"},{"vendor":"hitachi","product":"device_manager"},{"vendor":"hitachi","product":"hitachi configuration manager"},{"vendor":"hitachi","product":"hitachi device manager"},{"vendor":"hitachi","product":"hitachi ops center api configuration manager"},{"vendor":"hitachi","product":"ops_center_api_configuration_manager"}],"references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-111/index.html","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5781"},{"url":"https://github.com/advisories/GHSA-3pm4-mcqw-jq89"}],"sources":{"cve":[{"id":"CVE-2025-5781","title":"Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager","description":"Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.","status":"published","published":"2026-02-25T03:01:21.623Z","modified":"2026-02-26T17:00:34.754Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:32:30.302289Z"}],"euvd":[{"id":"EUVD-2025-208107","description":"Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.","status":"published","published":"2026-02-25T03:01:21Z","modified":"2026-02-26T17:00:34Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:48:23.821975Z"}],"ghsa":[{"id":"GHSA-3pm4-mcqw-jq89","title":"Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi...","description":"Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.","status":"published","published":"2026-02-25T03:30:58Z","modified":"2026-02-25T03:31:04Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T15:06:22.176933Z"}],"nvd":[{"id":"CVE-2025-5781","description":"Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.","status":"published","published":"2026-02-25T03:16:04.03Z","modified":"2026-06-17T09:48:44.22Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:12:01.096037Z"}]}}