Read the docs

Eskom

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Eskom records in CISA KEV

No Eskom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
E-belediye 3 records MEDIUM El Terminali (su Okuma) Uygulamalarimiz 1 record MEDIUM

Records

4 records

TI-2023-01750 CVE-2023-1863 · GHSA-pxp2-fv6q-mfmr

SQLi in Eskom Computer Water Metering Software

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00718 Published 2023-04-14 Fixed in 23.04.06 CWE-89
TI-2023-01054 CVE-2023-1114 · GHSA-vv2f-3v8c-53c4

Improper Input Validation on e-Belediye

Priority MEDIUM 43

Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00685 Published 2023-03-01 Fixed in 1.0.0.100 CWE-862
TI-2023-05656 CVE-2023-6151 · GHSA-vx62-r535-jwqf

Information Disclosure in Eskom E-municipality

Priority LOW 34

Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00596 Published 2023-11-28 Fixed in v.105 CWE-648
TI-2023-05655 CVE-2023-6150 · GHSA-9h2f-7xpr-xgq4

Information Disclosure in Eskom E-municipality

Priority LOW 34

Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00596 Published 2023-11-28 Fixed in v.105 CWE-648
Open these records in search →