CVE-2025-27631: Hitachi Energy Trmtracker

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code into a query and execute remote commands that can read and update data on the website.

Affected products

• Hitachi Energy Trmtracker: from 6.2, up to and including 6.2.04; from 6.3, up to and including 6.3.01

Published 2025-03-25. Last modified 2026-06-17.