Hitachi Energy Asset Suite vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Hitachi Energy Asset Suite: 2 record(s), with affected versions and fixes.
CVE-2026-7395
High · 8.5
CWE-306 Sep 29, 2026
Missing Authentication for Critical Function in Hitachi Energy Asset Suite
Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information disclosure and integrity compromise. The HTTPPublishAdapterTestServlet is specifically meant for testing purposes to be used in a non-production environment.
CVE-2026-11796
Medium · 5.1
CWE-306 Sep 29, 2026
Missing Authentication for Critical Function in Hitachi Energy Asset Suite
Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet and ResourceBundleReloadServlet, which could result in denial-of-service conditions affecting application availability. These servlets are designed to perform specific functions within production environment depending on how the Asset Suite application is configured.