CVE-2023-1995: Insufficient Logging Vulnerability in HiRDB

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-29 · updated 2026-06-17
Weakness: CWE-778

Description

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before 10-06-02; HiRDB Server With Addtional Function: before 09-60-2M, before 09-65-/W , before 09-66-/Q ; HiRDB Structured Data Access Facility: before 09-60-39, before 10-03-12, before 10-04-06, before 10-06-02.

Affected products

Hitachi HiRDB Server: from 09-00 through 09-00-30; from 09-01 through 09-01-24; from 09-02 through 09-02-32; from 09-03 through 09-03-27; from 09-04 through 09-04-31; from 09-00 through 09-00-32
Hitachi Hirdb Server With Additional Function: from 09-00 through 09-00-2d; from 09-01 through 09-01-\/x; from 09-02 through 09-02-2f; from 09-03 through 09-03-2a; from 09-04 through 09-04-2s; from 09-50 through 09-50-2k
Hitachi HiRDB Structured Data Access Facility: from 09-60 through 09-60-37; from 09-66 through 09-66-06; from 10-01 through 10-01-03; from 10-02 through 10-02-12; from 10-03 through 10-03-10; from 10-04 through 10-04-05

References

Get alerted when CVE-2023-1995 or the next vulnerability affects your stack