CVE-2021-35528

Improper Access Control vulnerability in the application authentication and authorization of Hitachi Energy Retail Operations, Counterparty Settlement and Billing (CSB) allows an attacker to execute a modified signed Java Applet JAR file. A successful exploitation may lead to data extraction or modification of data inside the application. This issue affects: Hitachi Energy Retail Operations 5.7.3 and prior versions. Hitachi Energy Counterparty Settlement and Billing (CSB) 5.7.3 prior versions.

• CWE-284

• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000067&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000068&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000067&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000068&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory

Published

Nov 17, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-35521A path traversal in Thrift command handlers in IDEMIA Morpho…5.9
• CVE-2021-35522A Buffer Overflow in Thrift command handlers in IDEMIA Morph…9.8
• CVE-2021-35523Securepoint SSL VPN Client v2 before 2.0.32 on Windows has u…7.8
• CVE-2021-35525PostSRSd before 1.11 allows a denial of service (subprocess …5.3
• CVE-2021-35526Backup file without encryption vulnerability is found in Hit…7.8
• CVE-2021-35527Password autocomplete vulnerability in the web application p…7.5
• CVE-2021-35529Insufficiently Protected Credentials vulnerability in client…7.2
• CVE-2021-3553A Server-Side Request Forgery (SSRF) vulnerability in the EP…7.5
• CVE-2021-35530A vulnerability in the application authentication and author…6.7
• CVE-2021-35531Improper Input Validation vulnerability in a particular conf…6.7
• CVE-2021-35532A vulnerability exists in the file upload validation part of…6.7
• CVE-2021-35533Improper Input Validation vulnerability in the APDU parser i…7.5