Known vulnerabilities in Growatt cloud portal - page 2

Vendor: Growatt
Software: Growatt cloud portal
Software CPE: cpe:2.3:a:growatt:growatt_cloud_portal:*:*:*:*:*:*:*:*
Website: https://en.growatt.com/
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Growatt cloud portal Growatt cloud portal is affected by 30 known vulnerabilities: 2 high, 26 medium, 2 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108041 - Authorization Bypass Through User-Controlled Key
CVE-2025-25276		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030
#VU108037 - Authorization Bypass Through User-Controlled Key
CVE-2025-27575		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030
#VU108036 - Authorization Bypass Through User-Controlled Key
CVE-2025-31950		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030
#VU108035 - Authorization Bypass Through User-Controlled Key
CVE-2025-31945		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030
#VU108020 - Authorization Bypass Through User-Controlled Key
CVE-2025-24487		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030
#VU108018 - Authorization Bypass Through User-Controlled Key
CVE-2025-31941		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030
#VU108017 - Authorization Bypass Through User-Controlled Key
CVE-2025-31357		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030
#VU108010 - Authorization Bypass Through User-Controlled Key
CVE-2025-31949		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030
#VU108009 - Authorization Bypass Through User-Controlled Key
CVE-2025-31933		 CWE-639 Medium
No
No
 - 29.04.2025 SB2025043030
#VU108008 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-30511		 CWE-79 Low
No
No
 - 29.04.2025 SB2025043030


Showing elements 21 - 40 out of 30