2877 matches found
Hitachi Energy RTU500 安全漏洞
Hitachi Energy RTU500 is a series of industrial control components from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi Energy RTU500 that stems from a specific sequence of attacks that could result in a reboot of the affected CMU...
Hitachi Energy RTU500 代码问题漏洞
Hitachi Energy RTU500 is a series of industrial control components from Hitachi, Ltd Hitachi, Japan. A code issue vulnerability exists in the Hitachi Energy RTU500 that stems from a specially crafted message sequence that could lead to a denial of service in the RTU500 CMU application...
Hitachi Energy TRMTracker 跨站脚本漏洞
Hitachi Energy TRMTracker is a front-end to back-end Commodity/Energy Trading and Risk Management C/ETRM software platform from Hitachi, Japan. A cross-site scripting vulnerability exists in Hitachi Energy TRMTracker that originates from a reflective cross-site scripting attack that could...
CISA Releases Three Industrial Control Systems Advisories
CISA released three Industrial Control Systems ICS advisories on March 6, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-065-01 Hitachi Energy PCU400 ICSA-25-065-02 Hitachi Energy Relion 670/650/SAM600-IO...
CISA Releases Eight Industrial Control Systems Advisories
CISA released eight Industrial Control Systems ICS advisories on March 4, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-063-01 Carrier Block Load ICSA-25-063-02 Keysight Ixia Vision Product Family...
Cisco, Hitachi, Microsoft, and Progress Flaws Actively Exploited—CISA Sounds Alarm
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added five security flaws impacting software from Cisco, Hitachi Vantara, Microsoft Windows, and Progress WhatsUp Gold to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The list of...
CISA Adds Five Known Exploited Vulnerabilities to Catalog
CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-20118link is external Cisco Small Business RV Series Routers Command Injection Vulnerability CVE-2022-43939link is external Hitachi Vantara Pentaho BA Server...
VulnCheck KEV: CVE-2022-43769
Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution...
Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution...
Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization...
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in the lack of authentication protection, which allows attackers to disclose sensitive information or cause service interruptions.
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server relates to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server’s server lies in its lack of access control mechanisms. This allows attackers to bypass security restrictions and gain unauthorized access to the system.
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker to bypass security restrictions and gain unauthorized access to the system...
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in its improper handling of insufficient permissions or privileges, allowing a malicious actor to trigger a service failure.
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in the improper handling of insufficient permissions or privileges. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in its authentication procedures’ flaws, which allow attackers to escalate their privileges, gain unauthorized access to protected information, or cause service failures.
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server relates to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to enhance their privileges, gain unauthorized access to protected information, or cause service failures...
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server’s server lies in its deserialization mechanism flaws, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in the shortcomings of its deserialization mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in the insufficient validation of requests at the server-side. This allows attackers to bypass security restrictions and disclose sensitive information.
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in insufficient validation of requests at the server side. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and disclose sensitive information...
The vulnerability of the software for data integration and analytics in Hitachi Vantara Pentaho Data Integration & Analytics lies in the insufficient protection of registration data, allowing unauthorized access to protected information by attackers.
The vulnerability of the software for data integration and analytics in Hitachi Vantara Pentaho Data Integration & Analytics lies in the insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to...
Hitachi Energy Service Suite
SUMMARY Hitachi Energy is aware of the multiple vulnerabilities related to open-source Apache Tomcat components that affect the Service Suite product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, integrity and availability...
CVE-2024-6696
The product implements access controls via a policy or other feature with the intention to disable or restrict accesses reads and/or writes to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad becau...
CVE-2024-6697
The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state. CWE-280 Hitachi Vantara Pentaho Business...