---
id: CVE-2026-2072
title: >-
  Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor
  (Analytics probe component), Hitachi Ops Center Analyzer.This issue affects
  Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from
  10.0.…
summary: >-
  Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor
  (Analytics probe component), Hitachi Ops Center Analyzer.This issue affects
  Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from
  10.0.…
severity: high
cvss: 8.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L'
cwe:
  - CWE-79
vendor: hitachi
product: infrastructure_analytics_advisor
affected:
  - infrastructure_analytics_advisor
  - 'ops_center_analyzer >= 10.0.0-00, < 11.0.5-00'
patched:
  - ops_center_analyzer 11.0.5-00
published: '2026-03-25'
updated: '2026-08-12'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-2072'
references:
  - url: >-
      https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-114/index.html
    label: hirt@hitachi.co.jp
tags:
  - nvd
epss: 0.00161
epssPercentile: 0.05708
ingestedAt: '2026-08-12T19:54:27.108Z'
---

## Overview

Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor (Analytics probe component), Hitachi Ops Center Analyzer.This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.5-00.

## Affected

- `infrastructure_analytics_advisor`
- `ops_center_analyzer >= 10.0.0-00, < 11.0.5-00`

## Remediation

Upgrade past the affected range:

- `ops_center_analyzer 11.0.5-00`