DI
Product
DIAEnergie
92
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 41High 32Medium 19Low 0
Watch
Add DIAEnergie to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-78308 | 9.8 | Sep 24 | Authentication Bypass in DIAEnergie Affected: before 1.11.00.022 |
| CVE-2024-43699 | 9.8 | Oct 3 | Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script AM_RegReport.aspx Affected: through 1.10.01.008 |
| CVE-2024-4548 | 9.8 | May 6 | An SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'RecalculateHDMWYC' message, which is split into 4 fields using the… Affected: before 1.10.01.004 |
| CVE-2024-4547 | 9.8 | May 6 | A SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'RecalculateScript' message, which is splitted into 4 fields using the… Affected: before 1.10.01.004 |
| CVE-2024-25574 | 9.8 | Apr 1 | SQL injection vulnerability exists in GetDIAE_usListParameters Affected: before 1.10.00.005 |
| CVE-2022-43774 | 9.8 | Oct 26 | The HandlerPageP_KID class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system Affected: 1.9.0 |
| CVE-2022-43775 | 9.8 | Oct 26 | The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system Affected: 1.9.0 |
| CVE-2022-3214 | 9.8 | Sep 16 | Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials Affected: before 1.9.03.009 |
| CVE-2022-1378 | 9.8 | May 2 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx Affected: before 1.8.02.004 |
| CVE-2022-1377 | 9.8 | May 2 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_rltHandler.ashx Affected: before 1.8.02.004 |
| CVE-2022-1376 | 9.8 | May 2 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_privgrpHandler.ashx Affected: before 1.8.02.004 |
| CVE-2022-1375 | 9.8 | May 2 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_slogHandler.ashx Affected: before 1.8.02.004 |
| CVE-2022-1374 | 9.8 | May 2 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_unHandler.ashx Affected: before 1.8.02.004 |
| CVE-2022-1372 | 9.8 | May 2 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in dlSlog.aspx Affected: before 1.8.02.004 |
| CVE-2022-1371 | 9.8 | May 2 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegf Affected: before 1.8.02.004 |
| CVE-2022-1370 | 9.8 | May 2 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadREGbyID Affected: before 1.8.02.004 |
| CVE-2022-1369 | 9.8 | May 2 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegIND Affected: before 1.8.02.004 |
| CVE-2022-1367 | 9.8 | May 2 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx Affected: before 1.8.02.004 |
| CVE-2022-1366 | 9.8 | May 2 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx Affected: before 1.8.02.004 |
| CVE-2022-27175 | 9.8 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetCalcTagList Affected: before 1.8.02.004 |
| CVE-2022-26887 | 9.8 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_loopmapHandler.ashx Affected: before 1.8.02.004 |
| CVE-2022-26836 | 9.8 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Calendar Affected: before 1.8.02.004 |
| CVE-2022-26667 | 9.8 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetDemandAnalysisData Affected: before 1.8.02.004 |
| CVE-2022-26666 | 9.8 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerECC.ashx Affected: before 1.8.02.004 |
| CVE-2022-26514 | 9.8 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_tagHandler.ashx Affected: before 1.8.02.004 |
| CVE-2022-26349 | 9.8 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_eccoefficientHandler.ashx Affected: before 1.8.02.004 |
| CVE-2022-26338 | 9.8 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerPageP_KID.ashx Affected: before 1.8.02.004 |
| CVE-2022-26069 | 9.8 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerPage_KID.ashx Affected: before 1.8.02.004 |
| CVE-2022-26065 | 9.8 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in GetLatestDemandNode Affected: before 1.8.02.004 |
| CVE-2022-26059 | 9.8 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetQueryData Affected: before 1.8.02.004 |
| CVE-2022-26013 | 9.8 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_dmdsetHandler.ashx Affected: before 1.8.02.004 |
| CVE-2022-25980 | 9.8 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerCommon.ashx Affected: before 1.8.02.004 |
| CVE-2022-25880 | 9.8 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerTag_KID.ashx Affected: before 1.8.02.004 |
| CVE-2022-0923 | 9.8 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerDialog_KID.ashx Affected: before 1.8.02.004 |
| CVE-2021-38393 | 9.8 | Aug 30 | A Blind SQL injection vulnerability exists in the /DataHandler/HandlerAlarmGroup.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior Affected: through 1.7.5 |
| CVE-2021-38391 | 9.8 | Aug 30 | A Blind SQL injection vulnerability exists in the /DataHandler/AM/AM_Handler.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior Affected: through 1.7.5 |
| CVE-2021-38390 | 9.8 | Aug 30 | A Blind SQL injection vulnerability exists in the /DataHandler/HandlerEnergyType.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior Affected: through 1.7.5 |
| CVE-2021-32983 | 9.8 | Aug 30 | A Blind SQL injection vulnerability exists in the /DataHandler/Handler_CFG.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior Affected: through 1.7.5 |
| CVE-2021-32967 | 9.8 | Aug 30 | Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to add a new administrative user without being authenticated or authorized, which may allow the attacker… Affected: through 1.7.5 |
| CVE-2021-32955 | 9.8 | Aug 30 | Delta Electronics DIAEnergie Version 1.7.5 and prior allows unrestricted file uploads, which may allow an attacker to remotely execute code Affected: through 1.7.5 |
| CVE-2026-78312 | 9.1 | Sep 24 | Path Traversal in DIAEnergie Affected: before 1.11.00.022 |
Showing 41
