Multiple Open-Source Software Vulnerabilities in Hitachi Energy Asset Suite Product
Hitachi Energy is aware of multiple reported vulnerabilities that affect the Asset Suite product versions mentioned in this document below. If exploited these vulnerabilities can potentially impact on confidentiality, integrity and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-23184US | high7.5 | — | ||
A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6. In some edge cases, the CachedOutputStream instances may not be clo… | ||||
| CVE-2024-22262US | — | Exploit | ||
Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be v… | ||||
| CVE-2023-6378US | high7.5 | — | ||
A serialization vulnerability in logback receiver component part of
logback version 1.4.11 allows an attacker to mount a Denial-Of-Service
attack by sending poisoned data.
| ||||
| CVE-2022-41678US | high8.8 | Exploit | ||
Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution.
In details, in ActiveMQ configurations, jetty allows
org.jolokia.http.AgentServlet… | ||||
| CVE-2022-44729US | high7.1 | — | ||
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16.
On version 1.16, a mal… | ||||
| CVE-2022-45868US | high7.8OT erhöht | — | ||
The web-based admin console in H2 Database Engine before 2.2.220 can be started via the CLI with the argument -webAdminPassword, which allows the user to specify the password in cl… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Multiple Open-Source Software Vulnerabilities in Hitachi Energy Asset Suite Productself
- ICS Advisory ICSA-25-261-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-261-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (12)
- MitigationAsset Suite
Apply general mitigation factors
- MitigationAsset Suite
Apply general mitigation factors
- MitigationAsset Suite
Apply general mitigation factors
- MitigationAsset Suite
Apply general mitigation factors
- MitigationAsset Suite
Apply general mitigation factors
- MitigationAsset Suite
Apply general mitigation factors
- BehobenAsset Suite
Upgrade to version 9.7
- BehobenAsset Suite
Upgrade to version 9.7
- BehobenAsset Suite
Upgrade to version 9.7
- BehobenAsset Suite
Upgrade to version 9.7
- BehobenAsset Suite
Upgrade to version 9.7
- BehobenAsset Suite
Upgrade to version 9.8 when available
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan