CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

560 matches found

ICS•added 2022/05/10 12:0 a.m.•63 views

Eaton Intelligent Power Protector

1. EXECUTIVE SUMMARY CVSS v3 5.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Eaton Equipment: Intelligent Power Protector IPP Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code...

5.4CVSS6.1AI score0.0051EPSS

SaveExploits0References5

ICS•added 2022/05/10 12:0 a.m.•88 views

Eaton Intelligent Power Manager Infrastructure

1. EXECUTIVE SUMMARY CVSS v3 5.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Eaton Equipment: Intelligent Power Manager Infrastructure Vulnerabilities: Cross-site Scripting, Reflected Cross-site Scripting, Improper Neutralization of Formula in a CSV File 2. RISK EVALUATION...

8CVSS6.8AI score0.00483EPSS

SaveExploits0References5

ICS•added 2022/05/10 12:0 a.m.•32 views

Eaton Intelligent Power Manager

1. EXECUTIVE SUMMARY CVSS v3 5.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Eaton Equipment: Intelligent Power Manager IPM v1 Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code...

5.2CVSS7.5AI score0.08439EPSS

SaveExploits0References5

Positive Technologies•added 2022/05/10 12:0 a.m.•12 views

PT-2022-3426 · Eaton · Eaton Intelligent Power Manager

Name of the Vulnerable Software and Affected Versions: Eaton Intelligent Power Manager IPM versions prior to 1.70 Description: The issue exists due to insufficient validation of input from certain resources by the IPM software, leading to stored Cross site scripting. An attacker would need access...

6.2CVSS5.7AI score0.08439EPSS

SaveExploits0References10

NVD•added 2022/04/19 9:15 p.m.•32 views

CVE-2021-23283

Eaton Intelligent Power Protector IPP prior to version 1.69 is vulnerable to stored Cross Site Scripting. The vulnerability exists due to insufficient validation of user input and improper encoding of the output for certain resources within the IPP software...

5.4CVSS0.0051EPSS

SaveExploits0References1

OSV•added 2022/04/19 9:15 p.m.•5 views

CVE-2021-23283

5.4CVSS5.8AI score0.0051EPSS

SaveExploits0References1

Prion•added 2022/04/19 9:15 p.m.•27 views

Cross site scripting

3.5CVSS5.4AI score0.0051EPSS

SaveExploits0References1Affected Software1

CVE•added 2022/04/19 8:26 p.m.•73 views

CVE-2021-23283

Eaton IPP (Intelligent Power Protector) is affected by CVE-2021-23283: all versions prior to 1.69 have a stored XSS flaw due to insufficient input validation and improper output encoding in certain resources. Impact described as cross-site scripting with potential for injection via untrusted data...

5.4CVSS5.3AI score0.0051EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2022/04/19 8:26 p.m.•39 views

CVE-2021-23283 Security issues in Eaton Intelligent Power Protector (IPP)

5.2CVSS5.7AI score0.0051EPSS

SaveExploits0References1

OSV•added 2022/04/18 5:15 p.m.•7 views

CVE-2021-23285

Eaton Intelligent Power Manager Infrastructure IPM Infrastructure version 1.5.0plus205 and all prior versions are vulnerable to reflected Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure IPM Infrastructure all version 1.5.0plus205 and prior...

4.8CVSS5.8AI score0.00405EPSS

SaveExploits0References2

OSV•added 2022/04/18 5:15 p.m.•6 views

CVE-2021-23286

Eaton Intelligent Power Manager Infrastructure IPM Infrastructure version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection. This issue affects: Eaton Intelligent Power Manager Infrastructure IPM Infrastructure all version 1.5.0plus205 and prior versions...

8CVSS7.3AI score0.00402EPSS

SaveExploits0References2

NVD•added 2022/04/18 5:15 p.m.•25 views

CVE-2021-23286

8CVSS0.00402EPSS

SaveExploits0References2

NVD•added 2022/04/18 5:15 p.m.•23 views

CVE-2021-23285

4.8CVSS0.00405EPSS

SaveExploits0References2

NVD•added 2022/04/18 5:15 p.m.•22 views

CVE-2021-23284

Eaton Intelligent Power Manager Infrastructure IPM Infrastructure version 1.5.0plus205 and all prior versions are vulnerable to Stored Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure IPM Infrastructure all version 1.5.0plus205 and prior...

5.7CVSS0.00483EPSS

SaveExploits0References2

Prion•added 2022/04/18 5:15 p.m.•23 views

Cross site scripting

3.5CVSS5.7AI score0.00405EPSS

SaveExploits0References2Affected Software1

Prion•added 2022/04/18 5:15 p.m.•17 views

Cross site scripting

3.5CVSS5.6AI score0.00483EPSS

SaveExploits0References2Affected Software1

Prion•added 2022/04/18 5:15 p.m.•16 views

Design/Logic Flaw

7.9CVSS7.8AI score0.00402EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2022/04/18 4:20 p.m.•29 views

CVE-2021-23286 Security issues in Eaton Intelligent Power Manager Infrastructure

5.7CVSS8AI score0.00402EPSS

SaveExploits0References2

CVE•added 2022/04/18 4:20 p.m.•92 views

CVE-2021-23286

CVE-2021-23286 affects Eaton’s IPM Infrastructure (IPM Infrastructure), across all versions up to 1.5.0plus205. The connected ICS/IR sources confirm a vulnerability in CSV formula handling (CSV Formula Injection) due to improper sanitization of imported CSV files. Exploitation requires access to ...

8CVSS6.5AI score0.00402EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2022/04/18 4:20 p.m.•30 views

CVE-2021-23284 Security issues in Eaton Intelligent Power Manager Infrastructure

5.7CVSS5.6AI score0.00483EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by