PT-2026-27638 · Hitachi · Hitachi Infrastructure Analytics Advisor+1

Published 2026-03-25 · Updated 2026-03-31 · CVE-2026-2072

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Hitachi Infrastructure Analytics Advisor versions prior to 11.0.5-00 Hitachi Ops Center Analyzer versions prior to 11.0.5-00

Description A Cross-Site Scripting issue exists in the Analytics probe component of Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer. This allows for potential malicious code execution within the context of a user's browser.

Recommendations Update Hitachi Infrastructure Analytics Advisor to version 11.0.5-00 or later. Update Hitachi Ops Center Analyzer to version 11.0.5-00 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-2072

Affected Products

Hitachi Infrastructure Analytics Advisor

Hitachi Ops Center Analyzer

References · 4

• https://hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-114/index.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2072 · Security Note
• https://twitter.com/CVEarity/status/2039022859109167144 · Twitter Post
• https://twitter.com/cyberbivash/status/2036658116243165304 · Twitter Post