steve-community

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

steve-community records in CISA KEV

No steve-community vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Steve 4 records HIGH Ocpp-jaxb 1 record LOW

Records

5 records

TI-2024-16726 CVE-2024-25407 · GHSA-hg7g-ghrw-94pc

SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a…

HIGH 72

SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00562 Published 2024-02-13 No fix listed CWE-331

TI-2024-30014 CVE-2024-44843 · GHSA-g2fr-wj73-rxrw

An issue in the web socket handshake process of SteVe v3.7.1 allows attackers to bypass…

HIGH 68

An issue in the web socket handshake process of SteVe v3.7.1 allows attackers to bypass authentication and execute arbitrary coammands via supplying crafted OCPP requests.

CVSS 3.1MEDIUM 5.9 Network Low privileges User interaction EPSS 0.00443 Published 2025-04-15 No fix listed CWE-287

TI-2023-28535 CVE-2023-52096 · GHSA-5798-fpq9-x4vx

SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with…

LOW 34

SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an application receives a StartTransaction Open Charge Point Protocol message with a time…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00616 Published 2023-12-26 No fix listed CWE-89

TI-2024-14305 CVE-2024-21550 · GHSA-g97m-fwww-wqf3

Cross-site scripting in SteVe

LOW 27

SteVe is an open platform that implements different version of the OCPP protocol for Electric Vehicle charge points, acting as a central server for management of registered charge points.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00399 Published 2024-08-12 Fixed in 3.5.1, 3.6.1 +1 CWE-79

TI-2026-22565 CVE-2026-28230

Improper access control in steve-community steve

LOW 25

SteVe is an open-source EV charging station management system.

CVSS 4.0MEDIUM 5.7 Network Low privileges No interaction EPSS 0.00185 Published 2026-02-26 No fix listed CWE-284

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0