Hitachi Compute Systems Manager vulnerabilities

CVE-2018-21026 [HIGH] CWE-200 CVE-2018-21026: A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.6.5-00 allows an unauthenticated remot A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.6.5-00 allows an unauthenticated remote user to read internal information.

CVE-2020-36695 [HIGH] CWE-276 CVE-2020-36695: Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Serve Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component), Hitachi Tiered Storage Manager on Linux, Hitachi Replication Manager on Linux, Hitachi Tuning Manager on Linux (Hitachi Tuning Manager server, Hitachi Tuning Manager - Agent for RAID, Hitachi Tuning Manager - Agent for NAS components), Hi

CVE-2018-14735 [HIGH] CWE-200 CVE-2018-14735: An Information Exposure issue was discovered in Hitachi Command Suite 8.5.3. A remote attacker may b An Information Exposure issue was discovered in Hitachi Command Suite 8.5.3. A remote attacker may be able to exploit a flaw in the permission of messaging that may allow for information exposure via a crafted message.

CVE-2018-21033 [MEDIUM] CWE-20 CVE-2018-21033: A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6 A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets (CSS) token sequence. Hitachi Command Suite includes Hitachi Device Manager, Hitachi Tiered Storage Manage

CVE-2015-1565 [MEDIUM] CWE-79 CVE-2015-1565: Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storag Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite, allows remote attackers to inject arbitrary web script or HTML via unspecified

CVE-2018-21032 [MEDIUM] CWE-209 CVE-2018-21032: A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to 8.5.0-00 allow authenticated remote users to expose technical information through error messages. Hitachi Command Suite includes Hitachi Device Manager and Hitachi Compute Systems Manager.