Known vulnerabilities in DIAEnergie - page 2

Vendor: Delta Electronics, Inc.
Software: DIAEnergie
Software CPE: cpe:2.3:a:delta_electronics:diaenergie:*:*:*:*:*:*:*:*
Website: https://www.deltaww.com/
Total vulnerabilities: 53
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DIAEnergie DIAEnergie is affected by 53 known vulnerabilities: 27 high, 17 medium, 9 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68750 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-41773		 CWE-89 Medium
No
No
 1.9.01.002 26.10.2022 SB2022102625
#VU68745 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-41133		 CWE-89 Medium
No
No
 1.9.01.002 26.10.2022 SB2022102625
#VU68744 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-41651		 CWE-79 Low
No
No
 1.9.01.002 26.10.2022 SB2022102625
#VU68743 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-41702		 CWE-79 Low
No
No
 1.9.01.002 26.10.2022 SB2022102625
#VU68742 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-41555		 CWE-79 Low
No
No
 1.9.01.002 26.10.2022 SB2022102625
#VU68740 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-41701		 CWE-79 Low
No
No
 1.9.01.002 26.10.2022 SB2022102625
#VU67301 - Use of Hard-coded Credentials
 CWE-798 High
No
No
 1.9 14.09.2022 SB2022091429
#VU61556 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-26887		 CWE-89 High
No
No
 1.8.02.004 23.03.2022 SB2022032302
#VU61555 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-26666		 CWE-89 High
No
No
 1.8.02.004 23.03.2022 SB2022032302
#VU61554 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-0923		 CWE-89 High
No
No
 1.8.02.004 23.03.2022 SB2022032302
#VU61553 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-26836		 CWE-89 High
No
No
 1.8.02.004 23.03.2022 SB2022032302
#VU61552 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-26013		 CWE-89 High
No
No
 1.8.02.004 23.03.2022 SB2022032302
#VU61551 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-26065		 CWE-89 High
No
No
 1.8.02.004 23.03.2022 SB2022032302
#VU61549 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-26059		 CWE-89 High
No
No
 1.8.02.004 23.03.2022 SB2022032302
#VU61548 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-26338		 CWE-89 High
No
No
 1.8.02.004 23.03.2022 SB2022032302
#VU61547 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-27175		 CWE-89 High
No
No
 1.8.02.004 23.03.2022 SB2022032302
#VU61546 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-26069		 CWE-89 High
No
No
 1.8.02.004 23.03.2022 SB2022032302
#VU61545 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-25980		 CWE-89 High
No
No
 1.8.02.004 23.03.2022 SB2022032302
#VU61544 - Incorrect Default Permissions
CVE-2022-26839		 CWE-276 Low
No
No
 1.8.02.004 23.03.2022 SB2022032302
#VU61543 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-25347		 CWE-22 High
No
No
 1.8.02.004 23.03.2022 SB2022032302


Showing elements 21 - 40 out of 53