Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for Hitachi Dynamic Link Manager for Windows by Hitachi

    CVE-2026-86578 (GCVE-0-2026-86578)

    Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
    VLAI
    Title
    Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows
    Summary
    Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows. This issue affects Hitachi Dynamic Link Manager for Windows: from 5.0.0-03 before 9.0.4-01.
    Severity
    7.3 (High)
    CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H
    CWE
    • CWE-59 - Improper link resolution before file access ('link following')
    Assigner
    Hitachi CNA
    References
    Impacted products
    Vendor Product Version
    Hitachi Hitachi Dynamic Link Manager for Windows Affected: 5.0.0-03 , < 9.0.4-01 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Hitachi Dynamic Link Manager for Windows",
          "vendor": "Hitachi",
          "versions": [
            {
              "changes": [
                {
                  "at": "9.0.4-01",
                  "status": "unaffected"
                }
              ],
              "lessThan": "9.0.4-01",
              "status": "affected",
              "version": "5.0.0-03",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows.\u003cp\u003eThis issue affects Hitachi Dynamic Link Manager for Windows: from 5.0.0-03 before 9.0.4-01.\u003c/p\u003e"
            }
          ],
          "value": "Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows.\n\nThis issue affects Hitachi Dynamic Link Manager for Windows: from 5.0.0-03 before 9.0.4-01."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-132",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-132 Symlink Attack"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59 Improper link resolution before file access (\u0027link following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-10T04:44:34.731Z",
        "orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
        "shortName": "Hitachi"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-160/index.html"
        }
      ],
      "source": {
        "advisory": "hitachi-sec-2026-160",
        "discovery": "UNKNOWN"
      },
      "title": "Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
    "assignerShortName": "Hitachi",
    "cveId": "CVE-2026-86578",
    "datePublished": "2026-11-10T04:44:34.731Z",
    "dateReserved": "2026-09-08T05:51:39.552Z",
    "dateUpdated": "2026-11-10T04:44:34.731Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-86579 (GCVE-0-2026-86579)

    Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
    VLAI
    Title
    Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows
    Summary
    Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows. This issue affects Hitachi Dynamic Link Manager for Windows: from 5.9.5-00 before 9.0.4-01.
    Severity
    8.2 (High)
    CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
    CWE
    • CWE-427 - Uncontrolled Search Path Element
    Assigner
    Hitachi CNA
    References
    Impacted products
    Vendor Product Version
    Hitachi Hitachi Dynamic Link Manager for Windows Affected: 5.9.5-00 , < 9.0.4-01 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Hitachi Dynamic Link Manager for Windows",
          "vendor": "Hitachi",
          "versions": [
            {
              "changes": [
                {
                  "at": "9.0.4-01",
                  "status": "unaffected"
                }
              ],
              "lessThan": "9.0.4-01",
              "status": "affected",
              "version": "5.9.5-00",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows.\u003cp\u003eThis issue affects Hitachi Dynamic Link Manager for Windows: from 5.9.5-00 before 9.0.4-01.\u003c/p\u003e"
            }
          ],
          "value": "Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows.\n\nThis issue affects Hitachi Dynamic Link Manager for Windows: from 5.9.5-00 before 9.0.4-01."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-17",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-17 Using Malicious Files"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-427",
              "description": "CWE-427 Uncontrolled Search Path Element",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-10T04:44:33.820Z",
        "orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
        "shortName": "Hitachi"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-160/index.html"
        }
      ],
      "source": {
        "advisory": "hitachi-sec-2026-160",
        "discovery": "UNKNOWN"
      },
      "title": "Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
    "assignerShortName": "Hitachi",
    "cveId": "CVE-2026-86579",
    "datePublished": "2026-11-10T04:44:33.820Z",
    "dateReserved": "2026-09-08T05:51:39.552Z",
    "dateUpdated": "2026-11-10T04:44:33.820Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}