Back to Database
Status published
High
CVE-2022-4895
Man-in-the-middle attack Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer
Vulnerability Description
Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component) allows Man in the Middle Attack.This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.1-00.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-4895
Credits & Attribution
No credits recorded in the NVD database.
References
More from Hitachi
View All →CVE-2025-9661
OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23/24/26/28
High
8.1
CVE-2025-7737
DoS Vulnerability in 10G iSCSI Interface of Hitachi Virtual Storage Platform
High
8.6
CVE-2025-7386
Information exposure vulnerability in Hitachi Storage Navigator
Medium
6.8
CVE-2025-66445
Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer
High
7.1
CVE-2025-66444
Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer
High
8.2
Affected Vendor
Hitachi
View all reports →Affected Software
Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer
Vulnerable Versions:
2.0.0-00, 10.0.0-00
Timeline
Official Publish:
February 28th, 2023
Last Modified:
March 7th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L