Multiple Open-Source Software Vulnerabilities in Hitachi Energy Asset Suite Product
Hitachi Energy is aware of multiple reported vulnerabilities that affect the Asset Suite product versions mentioned in this document below. If exploited these vulnerabilities can potentially impact on confidentiality, integrity and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-23184US | high7.5 | — | ||
A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6. In some edge cases, the CachedOutputStream instances may not be clo… | ||||
| CVE-2024-22262US | — | Exploit | ||
Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be v… | ||||
| CVE-2023-6378US | high7.5 | — | ||
A serialization vulnerability in logback receiver component part of
logback version 1.4.11 allows an attacker to mount a Denial-Of-Service
attack by sending poisoned data.
| ||||
| CVE-2022-41678US | high8.8 | Exploit | ||
Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution.
In details, in ActiveMQ configurations, jetty allows
org.jolokia.http.AgentServlet… | ||||
| CVE-2022-44729US | high7.1 | — | ||
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16.
On version 1.16, a mal… | ||||
| CVE-2022-45868US | high7.8OT elevated | — | ||
The web-based admin console in H2 Database Engine before 2.2.220 can be started via the CLI with the argument -webAdminPassword, which allows the user to specify the password in cl… | ||||
references
External citations — patches, advisories, analysis.
- Multiple Open-Source Software Vulnerabilities in Hitachi Energy Asset Suite Productself
- ICS Advisory ICSA-25-261-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-261-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (12)
- MitigationAsset Suite
Apply general mitigation factors
- MitigationAsset Suite
Apply general mitigation factors
- MitigationAsset Suite
Apply general mitigation factors
- MitigationAsset Suite
Apply general mitigation factors
- MitigationAsset Suite
Apply general mitigation factors
- MitigationAsset Suite
Apply general mitigation factors
- FixedAsset Suite
Upgrade to version 9.7
- FixedAsset Suite
Upgrade to version 9.7
- FixedAsset Suite
Upgrade to version 9.7
- FixedAsset Suite
Upgrade to version 9.7
- FixedAsset Suite
Upgrade to version 9.7
- FixedAsset Suite
Upgrade to version 9.8 when available
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan