Vulnerabilities

TI-2024-21618 CVE-2024-32739 · GHSA-v2jj-6wcp-962x

CyberPower PowerPanel Enterprise SQL Injection

HIGH 72

A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05408 Published 2024-05-09 Fixed in 2.8.3 CWE-89

TI-2024-21617 CVE-2024-32738 · GHSA-v2hv-5634-vcq8

MEDIUM 46

A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04553 Published 2024-05-09 Fixed in 2.8.3 CWE-89

TI-2024-21616 CVE-2024-32737 · GHSA-76hv-682v-6fpm

HIGH 72

A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05408 Published 2024-05-09 Fixed in 2.8.3 CWE-89

TI-2024-21615 CVE-2024-32736 · GHSA-262h-qq26-j72g

HIGH 72

A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05408 Published 2024-05-09 Fixed in 2.8.3 CWE-89

TI-2024-21614 CVE-2024-32735 · GHSA-67p4-w92f-qx68

HIGH 82

An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06765 Published 2024-05-09 Fixed in 2.8.3 CWE-306