Vulnerabilidades do Hitachi Energy Asset Suite
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Hitachi Energy Asset Suite: 2 registro(s), com versões afetadas e correções.
CVE-2026-7395
Alta · 8.5
CWE-306 29/09/2026
Missing Authentication for Critical Function em Hitachi Energy Asset Suite
Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information disclosure and integrity compromise. The HTTPPublishAdapterTestServlet is specifically meant for testing purposes to be used in a non-production environment.
CVE-2026-11796
Média · 5.1
CWE-306 29/09/2026
Missing Authentication for Critical Function em Hitachi Energy Asset Suite
Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet and ResourceBundleReloadServlet, which could result in denial-of-service conditions affecting application availability. These servlets are designed to perform specific functions within production environment depending on how the Asset Suite application is configured.