Vulnerabilities (CVE)

Filtered by vendor Deltaww Subscribe
Filtered by product Diaenergie
Total 63 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-23228 1 Deltaww 1 Diaenergie 2024-11-21 4.3 MEDIUM 7.5 HIGH
DIAEnergie Version 1.7.5 and prior is vulnerable to a reflected cross-site scripting attack through error pages that are returned by “.NET Request.QueryString”.
CVE-2024-43699 1 Deltaww 1 Diaenergie 2024-10-08 N/A 9.8 CRITICAL
Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script AM_RegReport.aspx. An unauthenticated attacker may be able to exploit this issue to obtain records contained in the targeted product.
CVE-2024-42417 1 Deltaww 1 Diaenergie 2024-10-08 N/A 8.8 HIGH
Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script Handler_CFG.ashx. An authenticated attacker may be able to exploit this issue to cause delay in the targeted product.