SU
Vendor
Sunbirddcim
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-55703 | PI Power IQ Sunbirddcim | 3.3 | Dec 15 | An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API |
| CVE-2024-37773 | DC Dctrack Sunbirddcim | 4.8 | Dec 16 | An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen |
| CVE-2024-37774 | DC Dctrack Sunbirddcim | 8.0 | Dec 16 | A Cross-Site Request Forgery (CSRF) in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform… |
| CVE-2024-37775 | DC Dctrack Sunbirddcim | 7.5 | Dec 16 | Incorrect access control in Sunbird DCIM dcTrack v9.1.2 allows attackers to create or update a ticket with a location which bypasses an RBAC check |
| CVE-2024-37776 | DC Dctrack Sunbirddcim | 4.8 | Dec 16 | A cross-site scripting (XSS) vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in some admin screens |