Asset Suite vulnerabilities

2 known vulnerabilities in Asset Suite from Hitachi Energy. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  Asset Suite: Missing Authentication for Critical Functionality

  CVE-2026-7395Sep 29, 2026Hitachi Energy

  Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information disclosure and integrity compromise. The HTTPPublishAdapterTestServlet is specifically meant for testing pur

• 7.4 High severity

  Asset Suite: Plaintext Storage of a Password

  CVE-2025-2500May 30, 2025Hitachi Energy

  A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded.