The vulnerability is an origin validation error in Hitachi HiRDB Server that allows an attacker to bypass the server’s origin checks and potentially access database services they should not be able to use. This could lead to the compromise of confidential data or unauthorized alterations to database contents.

Affected products include Hitachi HiRDB Server Version 10, Version 9, Version 9(32), HiRDB Server with Additional Function Version 9, and HiRDB Server with Additional Function Version 9(32). The vulnerability occurs in Server Version 10 from 10‑00 prior to 10‑12‑01; Server Version 9 from 09‑00 through 09‑66‑22; Server with Additional Function Version 9 from 09‑00 through 09‑66/V; Server Version 9(32) from 09‑02 through 09‑66‑22; and Server with Additional Function Version 9(32) from 09‑00 through 09‑66‑/V.

The CVSS score of 7.5 indicates a high severity risk. Because the EPSS score is not available and the vulnerability is not listed in KEV, the exploitation probability is unknown but it is possible that the vulnerability could be leveraged by an attacker who can reach the HiRDB Server over the network. Origin validation errors typically allow remote attackers to impersonate legitimate clients or to bypass intended access controls, so the attack vector is likely remote network access to the database service.