Known vulnerabilities in Growatt cloud portal

Vendor: Growatt
Software: Growatt cloud portal
Software CPE: cpe:2.3:a:growatt:growatt_cloud_portal:*:*:*:*:*:*:*:*
Website: https://en.growatt.com/
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Growatt cloud portal Growatt cloud portal is affected by 30 known vulnerabilities: 2 high, 26 medium, 2 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108089 - Authorization Bypass Through User-Controlled Key
CVE-2025-27929		 CWE-639 Medium
No
No
 - 30.04.2025 SB2025043030
#VU108088 - Authorization Bypass Through User-Controlled Key
CVE-2025-24315		 CWE-639 Medium
No
No
 - 30.04.2025 SB2025043030
#VU108087 - Authorization Bypass Through User-Controlled Key
CVE-2025-27561		 CWE-639 Medium
No
No
 - 30.04.2025 SB2025043030
#VU108086 - Authorization Bypass Through User-Controlled Key
CVE-2025-30257		 CWE-639 Medium
No
No
 - 30.04.2025 SB2025043030
#VU108085 - Authorization Bypass Through User-Controlled Key
CVE-2025-31147		 CWE-639 Medium
No
No
 - 30.04.2025 SB2025043030
#VU108084 - Authorization Bypass Through User-Controlled Key
CVE-2025-31360		 CWE-639 Medium
No
No
 - 30.04.2025 SB2025043030
#VU108083 - Configuration
CVE-2025-30512		 CWE-16 Medium
No
No
 - 30.04.2025 SB2025043030
#VU108082 - Authorization Bypass Through User-Controlled Key
CVE-2025-27927		 CWE-639 Medium
No
No
 - 30.04.2025 SB2025043030
#VU108081 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24297		 CWE-79 Low
No
No
 - 30.04.2025 SB2025043030
#VU108080 - Insufficient Type Distinction
CVE-2025-30510		 CWE-351 High
No
No
 - 30.04.2025 SB2025043030
#VU108079 - Authorization Bypass Through User-Controlled Key
CVE-2025-24850		 CWE-639 Medium
No
No
 - 30.04.2025 SB2025043030
#VU108038 - Authorization Bypass Through User-Controlled Key
CVE-2025-27565		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030
#VU108034 - Authorization Bypass Through User-Controlled Key
CVE-2025-26857		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030
#VU108033 - Authorization Bypass Through User-Controlled Key
CVE-2025-27719		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030
#VU108029 - Authorization Bypass Through User-Controlled Key
CVE-2025-31654		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030
#VU108028 - Authorization Bypass Through User-Controlled Key
CVE-2025-30514		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030
#VU108027 - Authorization Bypass Through User-Controlled Key
CVE-2025-27938		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030
#VU108026 - Authorization Bypass Through User-Controlled Key
CVE-2025-27939		 CWE-639 High
No
No
 - 29.04.2025 SB2025043030
#VU108025 - Authorization Bypass Through User-Controlled Key
CVE-2025-30254		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030
#VU108023 - Authorization Bypass Through User-Controlled Key
CVE-2025-27568		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030


Showing elements 1 - 20 out of 30