Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Diaenergie
(Deltaww)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 71 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2022-10-27 | CVE-2022-41701 | The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutShift API. | Diaenergie | 5.4 | ||
| 2022-11-17 | CVE-2022-43447 | SQL Injection in AM_EBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network | Diaenergie | 8.8 | ||
| 2022-11-17 | CVE-2022-43457 | SQL Injection in HandlerPage_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network | Diaenergie | 8.8 | ||
| 2022-11-17 | CVE-2022-43506 | SQL Injection in HandlerTag_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network | Diaenergie | 8.8 | ||
| 2022-11-17 | CVE-2022-43452 | SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network | Diaenergie | 8.8 | ||
| 2022-11-17 | CVE-2022-41775 | SQL Injection in Handler_CFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network | Diaenergie | 8.8 | ||
| 2023-02-17 | CVE-2023-0822 | The affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorization and access privileged functionality. | Diaenergie | 8.8 | ||
| 2024-03-21 | CVE-2024-28029 | Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality. | Diaenergie | 8.8 | ||
| 2024-10-03 | CVE-2024-42417 | Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script Handler_CFG.ashx. An authenticated attacker may be able to exploit this issue to cause delay in the targeted product. | Diaenergie | 8.8 | ||
| 2024-10-03 | CVE-2024-43699 | Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script AM_RegReport.aspx. An unauthenticated attacker may be able to exploit this issue to obtain records contained in the targeted product. | Diaenergie | 9.8 |