Hitachi Energy TRMTracker

• CVE-2025-27631 Medium 6.5 The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code into a query and execute remote commands that can read and update data on the webs 0.3%
• CVE-2025-27633 Medium 6.1 The TRMTracker web application is vulnerable to reflected Cross-site scripting attack. The application allows client-side code injection that might be used to compromise the confidentiality and integr 0.2%
• CVE-2025-27632 Medium 6.1 A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header value in an HTTP request to leverage multiple attack vectors, including defacing the 0.2%