IP
Product
Intelligent Power Protector
14
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 5Medium 4Low 0
Watch
Add Intelligent Power Protector to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-23279 | 10.0 | Apr 13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in… Affected: before 1.68 |
| CVE-2021-23277 | 10.0 | Apr 13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability Affected: before 1.68 |
| CVE-2026-22619 | 9.9 | Apr 16 | Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code execution by an attacker with access to the… Affected: before 2.00 |
| CVE-2021-23280 | 9.9 | Apr 13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability Affected: before 1.68 |
| CVE-2021-23278 | 9.6 | Apr 13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at… Affected: before 1.68 |
| CVE-2021-23276 | 8.8 | Apr 13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection Affected: before 1.68 |
| CVE-2026-22616 | 7.5 | Apr 16 | Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting controls. This… Affected: before 2.00 |
| CVE-2026-22617 | 7.4 | Apr 16 | Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a… Affected: before 2.00 |
| CVE-2026-22615 | 7.2 | Apr 16 | Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is possible for an attacker with admin privileges and access to the local system to… Affected: before 2.00 |
| CVE-2026-22618 | 7.1 | Apr 16 | A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecure attribute, potentially exposing users… Affected: before 2.00 |
| CVE-2022-33862 | 6.7 | Nov 25 | Improper access control mechanism in IPP Affected: before 1.71 |
| CVE-2021-23283 | 5.4 | Apr 19 | Eaton Intelligent Power Protector (IPP) prior to version 1.69 is vulnerable to stored Cross Site Scripting Affected: before 1.69 |
| CVE-2022-33861 | 5.1 | Nov 25 | Insufficient verification of authenticity in IPP Affected: before 1.71 |
| CVE-2021-23288 | 4.8 | Apr 1 | The vulnerability exists due to insufficient validation of input from certain resources by the IPP software Affected: before 1.69 |
Showing 14