Vendors / NREL Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now NREL records in CISA KEV No NREL vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 78
NREL BEopt 2.8.0.0 contains a DLL hijacking vulnerability that allows attackers to load arbitrary libraries by tricking users into opening application files from remote shares.
CVSS 4.0 HIGH 8.6· Network · No auth · User interaction · EPSS 0.00432 · Published 2026-01-07 · No fix listed CWE-427
Priority LOW 28
A vulnerability was found in NREL api-umbrella-web 0.7.1.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00489 · Published 2023-02-20 · No fix listed CWE-79
Priority LOW 28
A vulnerability classified as problematic was found in NREL api-umbrella-web 0.7.1.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00535 · Published 2023-02-04 · No fix listed CWE-79
Priority LOW 25
NREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an exception handler from being overwritten with arbitrary code.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00337 · Published 2019-07-25 · No fix listed CWE-121
Open these records in search → All records by CVSS severity
0 1 3 0 0
