Hitachi Ops Center Vulnerabilities Allow Remote Attacks, XSS

CERT-Bund has released a security advisory (WID-SEC-2026-0844) concerning multiple vulnerabilities in Hitachi Ops Center software. These vulnerabilities, with a CVSS Base Score of 8.2, allow remote attackers to bypass security measures and conduct cross-site scripting (XSS) attacks. The affected products include Hitachi Ops Center Administrator versions prior to 11.0.8 and Hitachi Ops Center Analyzer versions prior to 11.0.5-00.

Organizations utilizing the affected Hitachi Ops Center versions should implement available mitigation measures to address these security risks. The advisory indicates that remote attacks are possible, and the temporal score suggests a high risk. While no specific compliance deadline is mentioned, prompt review and application of security patches or workarounds are critical to prevent exploitation and maintain system integrity.