Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

17 records

Priority MEDIUM 51

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetCalcTagList.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01219 Published 2022-03-29 Fixed in 1.8.02.004 CWE-89
Priority LOW 35

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the DIAEnergie application, which may allow an attacker to plant new files (such as DLLs) or replace exi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00217 Published 2022-03-29 Fixed in 1.8.02.004 CWE-276
Priority MEDIUM 51

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetDemandAnalysisData.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01219 Published 2022-03-29 Fixed in 1.8.02.004 CWE-89
Priority MEDIUM 51

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_tagHandler.ashx.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01219 Published 2022-03-29 Fixed in 1.8.02.004 CWE-89
Priority MEDIUM 61

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_dmdsetHandler.ashx.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09136 Published 2022-03-29 Fixed in 1.8.02.004 CWE-89
Priority MEDIUM 51

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerDialog_KID.ashx.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01045 Published 2022-03-29 Fixed in 1.8.02.004 CWE-89
Priority MEDIUM 51

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerPage_KID.ashx.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01219 Published 2022-03-29 Fixed in 1.8.02.004 CWE-89
TI-2022-09036 CVE-2022-25347 · GHSA-g72m-m9vm-p582

Delta Electronics DIAEnergie Path Traversal

Priority MEDIUM 62

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files to locations on the file system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11386 Published 2022-03-29 Fixed in 1.8.02.004 CWE-37
Priority MEDIUM 51

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerCommon.ashx.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01219 Published 2022-03-29 Fixed in 1.8.02.004 CWE-89
Priority MEDIUM 51

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetQueryData.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01219 Published 2022-03-29 Fixed in 1.8.02.004 CWE-89