Known vulnerabilities in DIAEnergie

Vendor: Delta Electronics, Inc.
Software: DIAEnergie
Software CPE: cpe:2.3:a:delta_electronics:diaenergie:*:*:*:*:*:*:*:*
Website: https://www.deltaww.com/
Total vulnerabilities: 53
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DIAEnergie DIAEnergie is affected by 53 known vulnerabilities: 27 high, 17 medium, 9 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98073 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-42417		 CWE-89 High
No
No
 1.10.01.009 07.10.2024 SB2024100736
#VU98072 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-43699		 CWE-89 High
No
No
 1.10.01.009 07.10.2024 SB2024100736
#VU89226 - Improper input validation
CVE-2024-4549		 CWE-20 Medium
No
No
 1.10.01.004 07.05.2024 SB2024050738
#VU89224 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-4548		 CWE-89 High
Available
No
 1.10.01.004 07.05.2024 SB2024050738
#VU89222 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-4547		 CWE-89 High
No
No
 1.10.01.004 07.05.2024 SB2024050738
#VU89119 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-34033		 CWE-22 Medium
No
No
 1.10.01.004 03.05.2024 SB2024050301
#VU89118 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-34032		 CWE-89 Medium
No
No
 1.10.01.004 03.05.2024 SB2024050301
#VU89117 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-34031		 CWE-89 Medium
No
No
 1.10.01.004 03.05.2024 SB2024050301
#VU87555 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-28045		 CWE-79 Low
No
No
 1.10.00.005 15.03.2024 SB2024031522
#VU87554 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-25567		 CWE-22 Medium
No
No
 1.10.00.005 15.03.2024 SB2024031522
#VU87552 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-28171		 CWE-22 Medium
No
No
 1.10.00.005 15.03.2024 SB2024031522
#VU87550 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-25574		 CWE-89 Medium
No
No
 1.10.00.005 15.03.2024 SB2024031522
#VU87549 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-23494		 CWE-89 Medium
No
No
 1.10.00.005 15.03.2024 SB2024031522
#VU87547 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-23975		 CWE-89 Medium
No
No
 1.10.00.005 15.03.2024 SB2024031522
#VU87545 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-28040		 CWE-89 Medium
No
No
 1.10.00.005 15.03.2024 SB2024031522
#VU87544 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-25937		 CWE-89 Medium
No
No
 1.10.00.005 15.03.2024 SB2024031522
#VU87543 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-28891		 CWE-89 Medium
No
No
 1.10.00.005 15.03.2024 SB2024031522
#VU87542 - Improper Authorization
CVE-2024-28029		 CWE-285 Medium
No
No
 1.10.00.005 15.03.2024 SB2024031522
#VU81674 - Use of Hard-coded Credentials
CVE-2022-3214		 CWE-798 High
No
No
 1.9.03.009 06.10.2023 SB2023100616
#VU68741 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-40965		 CWE-79 Low
No
No
 1.9.01.002 26.10.2022 SB2022102625


Showing elements 1 - 20 out of 53