Approved changes feed: RSS · Atom

cpe:2.3:a:hitachi_energy:trmtracker:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHitachi Energy (57ae0a6c-1cbf-5100-9bbb-0f210f6013d6)
ProductTrmtracker (2c7f28d6-c6cb-5706-a625-ecdc74a401d9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-27633 vulnerable 2026-06-03 15:00:12.978106 Details available
MEDIUM (6.1)
The TRMTracker web application is vulnerable to reflected Cross-site scripting attack. The application allows client-side code injection that might be used to compromise the confidentiality and integrity of the system.
Published: 2025-03-25T12:40:37.667Z
Updated: 2025-03-25T13:09:15.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27632 vulnerable 2026-06-03 15:00:12.977844 Details available
MEDIUM (6.1)
A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header value in an HTTP request to leverage multiple attack vectors, including defacing the site content through web-cache poisoning.
Published: 2025-03-25T12:37:30.114Z
Updated: 2025-10-24T12:10:40.967Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27631 vulnerable 2026-06-03 15:00:12.977487 Details available
MEDIUM (6.5)
The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code into a query and execute remote commands that can read and update data on the website.
Published: 2025-03-25T12:46:08.184Z
Updated: 2025-03-25T13:07:52.198Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.