Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Release: Delta Electronics DIAEnergie v1.10.00.005 Clear all filters
TI-2024-18638 CVE-2024-28045 · GHSA-9w96-529w-5xrx

Delta Electronics DIAEnergie Cross-site scripting

Priority LOW 24

Improper neutralization of input within the affected product could lead to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00293 Published 2024-03-21 Fixed in v1.10.00.005 CWE-79
TI-2024-16802 CVE-2024-25567 · GHSA-mgcc-v376-cqg5

Delta Electronics DIAEnergie Path traversal

Priority LOW 39

Path traversal attack is possible and write outside of the intended directory and may access sensitive information.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00661 Published 2024-03-21 Fixed in v1.10.00.005 CWE-22
TI-2024-18749 CVE-2024-28171 · GHSA-99h3-9g3j-xw8m

Delta Electronics DIAEnergie Path traversal

Priority HIGH 68

It is possible to perform a path traversal attack and write outside of the intended directory.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00646 Published 2024-03-21 Fixed in v1.10.00.005 CWE-22
TI-2024-15537 CVE-2024-23494 · GHSA-62q9-cpw9-7wq5

Delta Electronics DIAEnergie SQL injection

Priority MEDIUM 51

SQL injection vulnerability exists in GetDIAE_unListParameters.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.08484 Published 2024-03-21 Fixed in v1.10.00.005 CWE-89
TI-2024-15950 CVE-2024-23975 · GHSA-28pm-frw8-mr59

Delta Electronics DIAEnergie SQL injection

Priority MEDIUM 51

SQL injection vulnerability exists in GetDIAE_slogListParameters.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.08484 Published 2024-03-21 Fixed in v1.10.00.005 CWE-89
TI-2024-18634 CVE-2024-28040 · GHSA-w8xc-6w99-h267

Delta Electronics DIAEnergie SQL injection

Priority MEDIUM 51

SQL injection vulnerability exists in GetDIAE_astListParameters.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.08484 Published 2024-03-21 Fixed in v1.10.00.005 CWE-89
TI-2024-17037 CVE-2024-25937 · GHSA-hf8q-wrgf-872g

Delta Electronics DIAEnergie SQL injection

Priority MEDIUM 51

SQL injection vulnerability exists in the script DIAE_tagHandler.ashx.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.08484 Published 2024-03-21 Fixed in v1.10.00.005 CWE-89
TI-2024-19086 CVE-2024-28891 · GHSA-mpfr-43f5-3jjf

Delta Electronics DIAEnergie SQL injection

Priority MEDIUM 51

SQL injection vulnerability exists in the script Handler_CFG.ashx.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.08484 Published 2024-03-21 Fixed in v1.10.00.005 CWE-89