What is the CVSS score of CVE-2025-5781?

CVE-2025-5781 has a CVSS 3.1 base score of 5.2 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Ops Center Api Configuration Manager are affected by CVE-2025-5781?

CVE-2025-5781 presents moderate security risk, a log file exposure vulnerability rated CVSS 5.2. This could allow unauthorized file access.

How to fix or mitigate CVE-2025-5781?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Review data exposure and access controls.

Ops Center Api Configuration Manager CVE-2025-5781

MEDIUM

Insertion of Sensitive Information into Log File (CWE-532)

2026-02-25 hirt@hitachi.co.jp

Information Disclosure Ops Center Api Configuration Manager Device Manager Configuration Manager

5.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.2 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 25, 2026 - 03:16 nvd

MEDIUM 5.2

DescriptionCVE.org

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.

AnalysisAI

Configuration Manager versions up to 11.0.5-00 is affected by insertion of sensitive information into log file (CVSS 5.2).

Technical ContextAI

This vulnerability (CWE-532: Insertion of Sensitive Information into Log File) affects Configuration Manager. Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.