Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Eskom Clear all filters
TI-2023-05656 CVE-2023-6151 · GHSA-vx62-r535-jwqf

Information Disclosure in Eskom E-municipality

Priority LOW 34

Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00596 Published 2023-11-28 Fixed in v.105 CWE-648
TI-2023-05655 CVE-2023-6150 · GHSA-9h2f-7xpr-xgq4

Information Disclosure in Eskom E-municipality

Priority LOW 34

Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00596 Published 2023-11-28 Fixed in v.105 CWE-648
TI-2023-01750 CVE-2023-1863 · GHSA-pxp2-fv6q-mfmr

SQLi in Eskom Computer Water Metering Software

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00718 Published 2023-04-14 Fixed in 23.04.06 CWE-89
TI-2023-01054 CVE-2023-1114 · GHSA-vv2f-3v8c-53c4

Improper Input Validation on e-Belediye

Priority MEDIUM 43

Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00685 Published 2023-03-01 Fixed in 1.0.0.100 CWE-862