Deltaww Diaenergie vulnerabilities, page 2

92 vulnerabilities

Known vulnerabilities in Deltaww Diaenergie, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CriticalCVE-2022-1367delta electronics · diaenergie +1 moredelta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS19.35%7.8HighCVE-2022-1098deltaww · diaenergie +1 moreDelta Electronics DIAEnergie Uncontrolledly Search Path ElementDelta Electronics DIAEnergie (all versions prior to 1.8.02.004) are vulnerable to a DLL hijacking condition. When combined with the Incorrect Default Permissions vulnerability of 4.2.2 above, this makes it possible for an attacker to escalate privilegesEPSS0.24%10CriticalCVE-2022-1375delta electronics · diaenergie +1 moredelta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_slogHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%10CriticalCVE-2022-1377delta electronics · diaenergie +1 moredelta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_rltHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%10CriticalCVE-2022-1372delta electronics · diaenergie +1 moredelta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in dlSlog.aspx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%10CriticalCVE-2022-1374delta electronics · diaenergie +1 moredelta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_unHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%10CriticalCVE-2022-1376delta electronics · diaenergie +1 moredelta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_privgrpHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%10CriticalCVE-2022-1370delta electronics · diaenergie +1 moredelta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadREGbyID. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%10CriticalCVE-2022-1371delta electronics · diaenergie +1 moredelta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegf. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%10CriticalCVE-2022-1369delta electronics · diaenergie +1 moredelta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegIND. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%8.8HighCVE-2022-41775delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL InjectionSQL Injection in Handler_CFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via NetworkEPSS0.66%8.7HighCVE-2022-41651delta electronics · diaenergie +1 moreDelta Electronics DIAEnergieThe affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the SetPF API.EPSS11.11%8.8HighCVE-2022-41133delta electronics · diaenergie +1 moreDelta Electronics DIAEnergieThe affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingsListParameters. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.EPSS26.57%8.8HighCVE-2022-41773delta electronics · diaenergie +1 moreDelta Electronics DIAEnergieThe affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckDIACloud. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.EPSS7.90%8.7HighCVE-2022-41701delta electronics · diaenergie +1 moreDelta Electronics DIAEnergieThe affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutShift API.EPSS11.11%8.7HighCVE-2022-41555delta electronics · diaenergie +1 moreDelta Electronics DIAEnergieThe affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutLineMessageSetting API.EPSS11.11%8.7HighCVE-2022-41702delta electronics · diaenergie +1 moreDelta Electronics DIAEnergieThe affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the InsertReg API.EPSS11.11%10CriticalCVE-2022-26338delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL Injection in DIAE_hierarchyHandler.ashxDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerPageP_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%10CriticalCVE-2022-26836delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL Injection in HandlerExport.ashx/Calendar.ashxDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Calendar. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%10CriticalCVE-2022-26666delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL Injection in HandlerDialogECC.ashxDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerECC.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%