Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Release: Delta Electronics DIAEnergie v1.9.01.002 Clear all filters
TI-2022-20094 CVE-2022-41702 · GHSA-r5wj-2hf2-f2hg

Cross-site scripting in Delta Electronics DIAEnergie

Priority MEDIUM 53

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the InsertReg API.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.11111 Published 2022-10-27 Fixed in v1.9.01.002 CWE-79
TI-2022-20046 CVE-2022-41651 · GHSA-5qgj-73pm-mvf2

Cross-site scripting in Delta Electronics DIAEnergie

Priority MEDIUM 53

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the SetPF API.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.11111 Published 2022-10-27 Fixed in v1.9.01.002 CWE-79
TI-2022-19652 CVE-2022-41133 · GHSA-gpfm-qqg7-xjcg

SQL injection in Delta Electronics DIAEnergie

Priority MEDIUM 62

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingsListParameters.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.27057 Published 2022-10-27 Fixed in v1.9.01.002 CWE-89
TI-2022-20150 CVE-2022-41773 · GHSA-f2r8-jjg8-4h22

SQL injection in Delta Electronics DIAEnergie

Priority MEDIUM 51

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckDIACloud.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.08055 Published 2022-10-27 Fixed in v1.9.01.002 CWE-89
TI-2022-20093 CVE-2022-41701 · GHSA-qvcw-p624-5mqm

Cross-site scripting in Delta Electronics DIAEnergie

Priority MEDIUM 53

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutShift API.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.11111 Published 2022-10-27 Fixed in v1.9.01.002 CWE-79
TI-2022-19510 CVE-2022-40967 · GHSA-9m4h-cwgq-6cq2

SQL injection in Delta Electronics DIAEnergie

Priority MEDIUM 51

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckIoTHubNameExisted.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0784 Published 2022-10-27 Fixed in v1.9.01.002 CWE-89
TI-2022-19961 CVE-2022-41555 · GHSA-59hp-pm4h-6xr4

Cross-site scripting in Delta Electronics DIAEnergie

Priority MEDIUM 53

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutLineMessageSetting API.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.11111 Published 2022-10-27 Fixed in v1.9.01.002 CWE-79
TI-2022-19508 CVE-2022-40965 · GHSA-49cg-8r82-w824

Cross-site scripting in Delta Electronics DIAEnergie

Priority MEDIUM 53

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PostEnergyType API.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.11111 Published 2022-10-27 Fixed in v1.9.01.002 CWE-79