CVE-2021-40339

Hitachi Energy LinkOne (WebView) is affected by CVE-2021-40339 due to a misconfiguration: the application lacks HTTP headers, enabling an attacker to retrieve sensitive information. Affected versions are LinkOne WebView 3.20, 3.22, 3.23, 3.24, 3.25, and 3.26. The CVE entry describes a configurati...

CVE-2021-40337

Affected product/variant: Hitachi Energy LinkOne WebView (versions 3.20, 3.22, 3.23, 3.24, 3.25, 3.26). Vulnerability: Cross-site Scripting (XSS) due to improper neutralization of input during web page generation (CWE-79). Impact (as stated): Multiple web attacks and theft of sensitive informatio...

CVE-2021-40338

Hitachi Energy LinkOne WebView is affected by CVE-2021-40338 due to a web server misconfiguration that enables debug mode and reveals the full filesystem directory path when errors occur during a query. Affected versions are LinkOne WebView 3.20, 3.22, 3.23, 3.24, 3.25, and 3.26. The issue can di...

CVE-2021-40340

Hitachi Energy LinkOne WebView (v3.20–v3.26) exhibits an Information Exposure vulnerability (CVE-2021-40340) caused by ASP server misconfiguration that reveals server and ASP.NET details. Exploitation can enable reconnaissance for further attacks; impact is limited to information disclosure rathe...