Description
A vulnerability exists in the media upload component of the Asset
Suite versions listed below. If successfully exploited an attacker
could impact the confidentiality or integrity of the system. An attacker can use this vulnerability to construct a request that will
cause JavaScript code supplied by the attacker to execute within
the user’s browser in the context of that user’s session with the
application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Energy | Asset Suite | 9.6.4.4 | 9.6.4.5 |
Advisories 1
- ICSA-25-196-01 Hitachi Energy Asset Suite CISA ICS & IT advisories · Apr 29, 2025