What is CVE-2025-66445?

CVE-2025-66445 is a high-severity vulnerability in Hitachi Infrastructure Analytics Advisor, classified under Missing Authentication for Critical Function. CVSS score: 7.1/10. Published 2025-12-24.

How severe is CVE-2025-66445?

High severity. CVSS v3 base score is 7.1 out of 10.

Auth bypass in Hitachi Infrastructure Analytics Advisor

CVE-2025-66445

Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component) and Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component).This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.5-00.

Vulnerability class: Broken Authentication

EPSS: 0.002 (11.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N.

Affected products

Hitachi Infrastructure Analytics Advisor — versions 0
Hitachi Ops Center Analyzer — versions 10.0.0-00

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

hirt@hitachi.co.jp (vendor-advisory)

Frequently asked questions

What is CVE-2025-66445?: CVE-2025-66445 is a high-severity vulnerability in Hitachi Infrastructure Analytics Advisor, classified under Missing Authentication for Critical Function. CVSS score: 7.1/10. Published 2025-12-24.
How severe is CVE-2025-66445?: High severity. CVSS v3 base score is 7.1 out of 10.