CVE-2026-2072 describes a high-severity Cross-Site Scripting (XSS) vulnerability impacting Hitachi Infrastructure Analytics Advisor (Analytics probe component) and Hitachi Ops Center Analyzer versions prior to 11.0.5-00. This flaw carries a CVSSv3.1 score of 8.2, indicating it can be exploited over the network with low privileges and low attack complexity, though user interaction is required. Successful exploitation could lead to a high impact on confidentiality. Currently, there is no evidence of active exploitation, nor are public exploit codes available in common repositories. Community discussion remains minimal, with only one mention noting its low-privilege exploitability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Hitachi | Hitachi Infrastructure Analytics Advisor | >= 0, < *CNA affecteddefault unaffected | |
| Hitachi | Hitachi Ops Center Analyzer | >= 10.0.0-00, < 11.0.5-00CNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.