CVE-2017-9298: Cross-site scripting vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manage...

Security readout for executives and security teams

This is an authenticated cross-site scripting issue in Hitachi Device Manager and Hitachi Replication Manager. A logged-in remote user could run arbitrary JavaScript in the product interface. Business urgency depends on whether these management tools are deployed and exposed to untrusted or broad user populations. Exposure is likely limited to organizations running the named Hitachi management products below the fixed versions, especially where the web interfaces are reachable by many authenticated users or shared administrative teams. Treat as a targeted remediation item for environments using these Hitachi tools. It is not supported as actively exploited in the supplied sources, but management software exposure raises operational risk. Mitigation focus: Inventory Hitachi Device Manager and Replication Manager deployments and record exact versions.; Upgrade Device Manager to 8.5.2-01 or later where applicable.; Upgrade Replication Manager to 8.5.2-00 or later where applicable..

Prepared

Jun 13, 2026, 05:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.