Hitachi Infrastructure Analytics Advisor and Ops Center Analyzer Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in Hitachi Infrastructure Analytics Advisor (specifically in the Analytics probe component) and Hitachi Ops Center Analyzer. This vulnerability affects versions of Hitachi Ops Center Analyzer from 10.0.0-00 up to, but not including, 11.0.5-00.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users of Hitachi Ops Center Analyzer should upgrade to version 11.0.5-00. For Hitachi Infrastructure Analytics Advisor, no specific fixed version is mentioned, so users should consult Hitachi's vulnerability information page for guidance.