Hitachi Energy Ellipse

aruschman

Apr 02, 2026

Release Date

April 02, 2026

Description

View CSAF

Summary

Hitachi Energy is aware of a Jasper Report vulnerability that affects the Ellipse product versions mentioned in this document below. This vulnerability can be exploited to carry out remote code execution (RCE) attack on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

The following versions of Hitachi Energy Ellipse are affected:

Ellipse vers:Ellipse/<=9.0.50 (CVE-2025-10492)

CVSS Vendor Equipment Vulnerabilities

v3 9.8 Hitachi Energy Hitachi Energy Ellipse Deserialization of Untrusted Data

Background

Critical Infrastructure Sectors: Critical Manufacturing

Countries/Areas Deployed: Worldwide

Company Headquarters Location: Switzerland

Vulnerabilities

Expand All +

CVE-2025-10492

A vulnerability exists in Jasper Report third party component that is used for creating custom reports in Ellipse product.…