CVE-2017-9296

Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Tuning Manager before 8.5.2-00 allows remote attackers to redirect authenticated users to arbitrary web sites...

Open redirect

Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Tuning Manager before 8.5.2-00 allows remote attackers to redirect authenticated users to arbitrary web sites...

CVE-2017-9297

Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to redirect users to arbitrary web sites...

CVE-2017-9294

RMI vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to execute internal commands without authentication via RMI ports...

CVE-2017-9296

Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Tuning Manager before 8.5.2-00 allows remote attackers to redirect authenticated users to arbitrary web sites...

Authentication flaw

RMI vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to execute internal commands without authentication via RMI ports...

CVE-2017-9295

XXE vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to read arbitrary files...

CVE-2017-9294

RMI vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to execute internal commands without authentication via RMI ports...

CVE-2017-9297

Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to redirect users to arbitrary web sites...

CVE-2017-9296

The CVE-2017-9296 entry maps to an Open Redirect vulnerability in Hitachi Device Manager (< 8.5.2-01) and Hitachi Tuning Manager (

CVE-2017-9298

CVE-2017-9298 is a cross-site scripting vulnerability in Hitachi Device Manager prior to 8.5.2-01 and Hitachi Replication Manager prior to 8.5.2-00. It enables authenticated remote users to execute arbitrary JavaScript in the affected web interfaces. Supported references list the affected product...

CVE-2017-9297

The CVE tracks an Open Redirect vulnerability in Hitachi Device Manager versions prior to 8.5.2-01. The issue allows remote attackers to redirect users to arbitrary web sites, impacting authentication flow and user navigation. Affected product: Hitachi Device Manager; vulnerable component is the ...

CVE-2017-9295

CVE-2017-9295 describes an XML External Entity (XXE) information disclosure affecting Hitachi Device Manager (before 8.5.2-01) and Hitachi Replication Manager (before 8.5.2-00). The vulnerability allows authenticated remote users to read arbitrary files due to a flaw in how XML input is processed...

CVE-2017-9294

RMI vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to execute internal commands without authentication via RMI ports...

Unspecified Vulnerability in Multiple Hitachi Products

Hitachi Device Manager is a suite of mobile device management software; Replication Manager is a suite of data replication software that simplifies Hitachi storage systems. A security vulnerability exists in several Hitachi products, which could be exploited by attackers to obtain sensitive...

CVE-2015-1565

Cross-site scripting XSS vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite, allows remote attackers...

Cross site scripting

Cross-site scripting XSS vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite, allows remote attackers...

A Problem of CPU Consumption in Host Data Collector bundled with Hitachi Device Manager Software

Overview Host Data Collector bundled with Hitachi Device Manager Software contains a problem of CPU consumption. Impact When Host Data Collector receives a malicious unexpected request, a process of Host Data Collector might consume CPU resources. Solution Please refer to the 'Vendor Information'...

Hitachi Device Manager Software Denial of Service (DoS) Vulnerability

Overview Hitachi Device Manager Software HDvM contains a denial of service abend vulnerability when receiving a large amount of data at once. If HDvM exits abnormally, users will be able to resume using the software by restarting the HDvM service or daemon. Impact A remote attacker could cause a...

Issue of Access Control Failure in Hitachi Device Manager Server

Overview Hitachi Device Manager servers contain a vulnerability in which access control settings would be rendered invalid in the following cases: - IPv6 format is used for communications between a Hitachi Device Manager server and its clients. - Access controls for Hitachi Device Manager clients...