DI
Product
DIAEnergie
92
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 41High 32Medium 19Low 0
Watch
Add DIAEnergie to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-78313 | 6.5 | Sep 24 | Improper Access Control in DIAEnergie Affected: before 1.11.00.022 |
| CVE-2025-57703 | 6.1 | Aug 18 | Reflected Cross-site Scripting in DIAEnergie Affected: before 1.11.01.001 |
| CVE-2025-57702 | 6.1 | Aug 18 | Reflected Cross-site Scripting in DIAEnergie Affected: before 1.11.01.001 |
| CVE-2025-57701 | 6.1 | Aug 18 | Reflected Cross-site Scripting in DIAEnergie Affected: before 1.11.01.001 |
| CVE-2025-57700 | 6.1 | Aug 18 | Stored Cross-site Scripting in DIAEnergie Affected: before 1.11.01.001 |
| CVE-2022-33005 | 6.1 | Jun 27 | A cross-site scripting (XSS) vulnerability in the System Settings/IOT Settings module of Delta Electronics DIAEnergie v1.08.00 allows attackers to execute arbitrary web scripts… Affected: 1.08.00 |
| CVE-2021-44544 | 6.1 | Dec 22 | DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script… Affected: through 1.7.5 |
| CVE-2021-44471 | 6.1 | Dec 22 | DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “name” of the script… Affected: through 1.7.5 |
| CVE-2021-31558 | 6.1 | Dec 22 | DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “descr” of the script… Affected: through 1.7.5 |
| CVE-2021-23228 | 6.1 | Dec 22 | DIAEnergie Version 1.7.5 and prior is vulnerable to a reflected cross-site scripting attack through error pages that are returned by “.NET Request.QueryString” Affected: through 1.7.5 |
| CVE-2021-33003 | 5.5 | Aug 30 | Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to retrieve passwords in cleartext due to a weak hashing algorithm Affected: through 1.7.5 |
| CVE-2024-28045 | 5.4 | Mar 21 | Delta Electronics DIAEnergie Cross-site scripting Affected: before 1.10.00.005 |
| CVE-2022-41702 | 5.4 | Oct 27 | Delta Electronics DIAEnergie Affected: before 1.9.01.002 |
| CVE-2022-41651 | 5.4 | Oct 27 | Delta Electronics DIAEnergie Affected: before 1.9.01.002 |
| CVE-2022-41701 | 5.4 | Oct 27 | Delta Electronics DIAEnergie Affected: before 1.9.01.002 |
| CVE-2022-41555 | 5.4 | Oct 27 | Delta Electronics DIAEnergie Affected: before 1.9.01.002 |
| CVE-2022-40965 | 5.4 | Oct 27 | Delta Electronics DIAEnergie Affected: before 1.9.01.002 |
| CVE-2026-78310 | 4.3 | Sep 24 | Authorization Bypass Through User-Controlled Key in DIAEnergie Affected: before 1.11.00.022 |
| CVE-2021-32991 | 4.3 | Aug 30 | Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cross-site request forgery, which may allow an attacker to cause a user to carry out an action… Affected: through 1.7.5 |
Showing 19