What’s Vulnerable › Vulnerabilities
CVE-2025-27632
- Severity: medium (CVSS 6.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-03-25 · updated 2026-06-17
- Weakness: CWE-644
Description
A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header value in an HTTP request to leverage multiple attack vectors, including defacing the site content through web-cache poisoning.
Affected products
- Hitachi Energy TRMTracker: from 6.2 through 6.2.04; from 6.3 through 6.3.01
References
Get alerted when CVE-2025-27632 or the next vulnerability affects your stack