CVE-2025-66444

HIGH EPSS 6.0%

Published Dec 24, 20256mo ago · Modified Jun 17, 20262w ago

8.2 CVSS 3.1

High

Published Dec 24, 2025 6mo ago

Last Modified Jun 17, 2026 2w ago

Description

Cross-site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component) and Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component).This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.5-00.

CVSS Details

Base Score

8.2

Exploitability

2.3

Impact

5.3

Vector string

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction Required

Scope Changed

Confidentiality High

Integrity Low

Availability Low

Threat Intelligence

EPSS Exploit Probability

6.0% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

References 1

hitachi.com https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-133/index.html

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.