Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Group Arge Energy and Control Systems Component: Smartpower Web Clear all filters
TI-2022-22180 CVE-2022-45091 · GHSA-2rvr-w7cm-2x8g

Cross-site Scripting in Smartpower Web

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00358 Published 2023-02-08 Fixed in 23.01.01 CWE-79
TI-2022-22179 CVE-2022-45090 · GHSA-j42q-qx22-hx5m

SQL Injection in Smartpower Web

Priority MEDIUM 41

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0064 Published 2023-02-08 Fixed in 23.01.01 CWE-89
TI-2022-22178 CVE-2022-45089 · GHSA-r8f3-7jxf-3847

SQL Injection in Smartpower Web

Priority MEDIUM 41

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0064 Published 2023-02-08 Fixed in 23.01.01 CWE-89
TI-2022-22177 CVE-2022-45088 · GHSA-98r2-j37g-59rm

Local File Inclusion in Smartpower Web

Priority MEDIUM 50

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows PHP Local File Inclusion.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00724 Published 2023-02-08 Fixed in 23.01.01 CWE-20
TI-2022-22176 CVE-2022-45087 · GHSA-6h32-pvwh-xx2f

Cross-site Scripting in Smartpower Web

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00378 Published 2023-02-08 Fixed in 23.01.01 CWE-79
TI-2022-22175 CVE-2022-45086 · GHSA-xj8j-hpff-95j8

Cross-site Scripting in Smartpower Web

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00358 Published 2023-02-08 Fixed in 23.01.01 CWE-79
TI-2022-22174 CVE-2022-45085 · GHSA-83vx-xm77-c4mm

Server-Side Request Forgery in Smartpower Web

Priority LOW 30

Server-Side Request Forgery (SSRF) vulnerability in Group Arge Energy and Control Systems Smartpower Web allows : Server Side Request Forgery.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00552 Published 2023-02-08 Fixed in 23.01.01 CWE-918