Login Request a demo
IP
Product
Intelligent Power Manager
by Eaton · last CVE Apr 18, 2022
12
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 6High 4Medium 2Low 0
Severity
All severities12Critical6High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Intelligent Power Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-23281
10.0
2%
Apr 13
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability
Affected: before 1.69
CVE-2021-23279
10.0
27%
Apr 13
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in…
Affected: before 1.69
CVE-2021-23277
10.0
1%
Apr 13
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability
Affected: before 1.69
CVE-2021-23280
9.9
1%
Apr 13
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability
Affected: before 1.69
CVE-2018-12031
9.8
19%
Jun 7
Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory traversal with the firmware parameter in…
Affected: 1.6
CVE-2021-23278
9.6
1%
Apr 13
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at…
Affected: before 1.69
CVE-2021-23276
8.8
1%
Apr 13
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection
Affected: before 1.69
CVE-2021-23286
8.0
0%
Apr 18
Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection
Affected: through 1.5.0plus205
CVE-2020-6652
7.8
0%
May 7
Incorrect Privilege Assignment vulnerability in Eaton's Intelligent Power Manager (IPM) v1.67 & prior allow non-admin users to upload the system configuration files by sending…
Affected: through 1.67
CVE-2020-6651
7.3
2%
May 7
Improper Input Validation in Eaton's Intelligent Power Manager (IPM) v 1.67 & prior on file name during configuration file import functionality allows attackers to perform command…
Affected: through 1.67
CVE-2021-23287
5.4
0%
Apr 1
The vulnerability exists due to insufficient validation of input of certain resources within the IPM software
Affected: before 1.70
CVE-2021-23285
4.8
0%
Apr 18
Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to reflected Cross-site Scripting vulnerability
Affected: through 1.5.0plus205
Showing 12