Delta Electronics Diaenergie vulnerabilities
69 vulnerabilities
Known vulnerabilities in Delta Electronics Diaenergie, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-31558delta electronicsdiaenergie+1
EPSS score10.56%
DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “descr” of the script “DIAE_hierarchyHandler.ashx”.CVE-2021-44544delta electronicsdiaenergie+1EPSS score9.49%
DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”.CVE-2021-44471delta electronicsdiaenergie+1EPSS score0.70%
DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “name” of the script “DIAE_HandlerAlarmGroup.ashx”.CVE-2021-23228delta electronicsdiaenergie+1EPSS score0.64%
DIAEnergie Version 1.7.5 and prior is vulnerable to a reflected cross-site scripting attack through error pages that are returned by “.NET Request.QueryString”.CVE-2025-57701delta electronicsdiaenergie+1EPSS score0.16%
DIAEnergie - Reflected Cross-site ScriptingCVE-2025-57702delta electronicsdiaenergie+1EPSS score0.16%
DIAEnergie - Reflected Cross-site ScriptingCVE-2025-57700delta electronicsdiaenergie+1EPSS score0.18%
DIAEnergie - Stored Cross-site ScriptingCVE-2025-57703delta electronicsdiaenergie+1EPSS score0.16%
DIAEnergie - Reflected Cross-site ScriptingCVE-2022-40965delta electronicsdiaenergie+1EPSS score11.11%
The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PostEnergyType API.CVE-2022-40967delta electronicsdiaenergie+1EPSS score7.69%
The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckIoTHubNameExisted. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.CVE-2022-1366delta electronicsdiaenergie+1EPSS score19.35%
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.CVE-2022-1378delta electronicsdiaenergie+1EPSS score19.35%
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.CVE-2022-1367delta electronicsdiaenergie+1EPSS score19.35%
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.CVE-2022-1375delta electronicsdiaenergie+1EPSS score1.22%
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_slogHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.CVE-2022-1377delta electronicsdiaenergie+1EPSS score1.22%
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_rltHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.CVE-2022-1372delta electronicsdiaenergie+1EPSS score1.22%
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in dlSlog.aspx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.CVE-2022-1374delta electronicsdiaenergie+1EPSS score1.22%
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_unHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.CVE-2022-1376delta electronicsdiaenergie+1EPSS score1.22%
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_privgrpHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.CVE-2022-1370delta electronicsdiaenergie+1EPSS score1.22%
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadREGbyID. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.CVE-2022-1371delta electronicsdiaenergie+1EPSS score1.22%
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegf. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.