Deltaww Diaenergie vulnerabilities, page 3
92 vulnerabilities
Known vulnerabilities in Deltaww Diaenergie, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CriticalCVE-2022-26667delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL Injection in GetDemandAnalysisDataDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetDemandAnalysisData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%CriticalCVE-2022-26013delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL Injection in DIAE_dmdsetHandler.ashxDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_dmdsetHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS9.14%CriticalCVE-2022-26349delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL Injection in DIAE_eccoefficientHandler.ashxDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_eccoefficientHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%HighCVE-2022-26839delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie Incorrect Default PermissionsDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the DIAEnergie application, which may allow an attacker to plant new files (such as DLLs) or replace existing executable files.EPSS0.22%CriticalCVE-2022-26887delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL Injection in DIAE_HandlerTag_KID.ashxDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_loopmapHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS9.01%CriticalCVE-2022-26069delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL Injection in HandlerPage_KID.ashxDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerPage_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%CriticalCVE-2022-26065delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL Injection in GetLatestDemandNode and GetDemandAnalysisDataDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in GetLatestDemandNode. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%CriticalCVE-2022-26059delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL Injection in GetQueryDataDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%CriticalCVE-2022-26514delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL Injection in DIAE_tagHandler.ashxDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_tagHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%CriticalCVE-2022-0923delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL Injection in HandlerDialog_KID.ashxDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerDialog_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.04%HighCVE-2022-0988delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie CLEARTEXT Transmission of Sensitive InformationDelta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product.EPSS0.52%CriticalCVE-2022-25347delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie Path TraversalDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files to locations on the file system.EPSS11.39%CriticalCVE-2022-25980delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL Injection in HandlerCommon.ashxDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerCommon.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%CriticalCVE-2022-25880delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL Injection in DIAE_hierarchyHandler.ashxDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerTag_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.EPSS1.22%HighCVE-2022-43452delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL InjectionSQL Injection in
FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via NetworkEPSS7.69%CriticalCVE-2022-43774deltaww · diaenergiedeltaww diaenergieThe HandlerPageP_KID class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.EPSS0.77%HighCVE-2022-43457delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL InjectionSQL Injection in
HandlerPage_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via NetworkEPSS0.66%HighCVE-2022-43506delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL InjectionSQL Injection in
HandlerTag_KID.ashx
in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via NetworkEPSS0.73%HighCVE-2022-43447delta electronics · diaenergie +1 moreDelta Electronics DIAEnergie SQL InjectionSQL Injection in
AM_EBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via NetworkEPSS0.66%CriticalCVE-2022-43775deltaww · diaenergiedeltaww diaenergieThe HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.EPSS20.59%