The vulnerability is an improper validation of user‑supplied URLs that allows an attacker to craft a link which, when followed by a user, redirects them to an arbitrary external location. This open redirect can be used for phishing campaigns or to trick users into visiting malicious sites, potentially compromising credentials or delivering malware. The weakness is a classic input validation defect classified as CWE‑601.

The affected product is Hitachi Ops Center Administrator. Versions from 10.2.0 up to but not including 11.0.8 are vulnerable. No other vendors or products are listed in the CNA data.

The CVSS score of 4.3 indicates moderate severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no widespread exploitation yet. The likely attack path requires an attacker to embed a malicious URL into the application or deliver it through a phishing email. Successful exploitation hinges on user interaction – the user must click the manipulated link. Once redirected, the user may be exposed to phishing or other malicious content. Given the moderate score and user interaction requirement, the risk is considered moderate but should be mitigated promptly.