Security Advisory

CVE-2025-27632

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-03-25 12:37:30
Last updated 2025-10-24 12:10:40
Assigner Hitachi Energy
State PUBLISHED

Description

A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header value in an HTTP request to leverage multiple attack vectors, including defacing the site content through web-cache poisoning.