CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

587 matches found

ICS•added 2022/05/10 12:00 a.m.•40 views

Eaton Intelligent Power Manager

1. EXECUTIVE SUMMARY CVSS v3 5.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Eaton Equipment: Intelligent Power Manager IPM v1 Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code...

5.2CVSS7.5AI score0.08787EPSS

SaveExploits0References5

OSV•added 2022/04/19 9:15 p.m.•10 views

CVE-2021-23283

Eaton Intelligent Power Protector IPP prior to version 1.69 is vulnerable to stored Cross Site Scripting. The vulnerability exists due to insufficient validation of user input and improper encoding of the output for certain resources within the IPP software...

5.4CVSS5.8AI score0.00531EPSS

SaveExploits0References1

NVD•added 2022/04/19 9:15 p.m.•38 views

CVE-2021-23283

5.4CVSS0.00531EPSS

SaveExploits0References1

Prion•added 2022/04/19 9:15 p.m.•33 views

Cross site scripting

3.5CVSS5.4AI score0.00531EPSS

SaveExploits0References1Affected Software1

CVE•added 2022/04/19 8:26 p.m.•83 views

CVE-2021-23283

Eaton IPP (Intelligent Power Protector) is affected by CVE-2021-23283: all versions prior to 1.69 have a stored XSS flaw due to insufficient input validation and improper output encoding in certain resources. Impact described as cross-site scripting with potential for injection via untrusted data...

5.4CVSS5.3AI score0.00531EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2022/04/19 8:26 p.m.•46 views

CVE-2021-23283 Security issues in Eaton Intelligent Power Protector (IPP)

5.2CVSS5.7AI score0.00531EPSS

SaveExploits0References1

OSV•added 2022/04/18 5:15 p.m.•10 views

CVE-2021-23286

Eaton Intelligent Power Manager Infrastructure IPM Infrastructure version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection. This issue affects: Eaton Intelligent Power Manager Infrastructure IPM Infrastructure all version 1.5.0plus205 and prior versions...

8CVSS7.3AI score0.00419EPSS

SaveExploits0References2

NVD•added 2022/04/18 5:15 p.m.•29 views

CVE-2021-23285

Eaton Intelligent Power Manager Infrastructure IPM Infrastructure version 1.5.0plus205 and all prior versions are vulnerable to reflected Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure IPM Infrastructure all version 1.5.0plus205 and prior...

4.8CVSS0.00422EPSS

SaveExploits0References2

NVD•added 2022/04/18 5:15 p.m.•30 views

CVE-2021-23286

8CVSS0.00419EPSS

SaveExploits0References2

OSV•added 2022/04/18 5:15 p.m.•11 views

CVE-2021-23285

4.8CVSS5.8AI score0.00422EPSS

SaveExploits0References2

NVD•added 2022/04/18 5:15 p.m.•26 views

CVE-2021-23284

Eaton Intelligent Power Manager Infrastructure IPM Infrastructure version 1.5.0plus205 and all prior versions are vulnerable to Stored Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure IPM Infrastructure all version 1.5.0plus205 and prior...

5.7CVSS0.00503EPSS

SaveExploits0References2

Prion•added 2022/04/18 5:15 p.m.•21 views

Cross site scripting

3.5CVSS5.6AI score0.00503EPSS

SaveExploits0References2Affected Software1

Prion•added 2022/04/18 5:15 p.m.•27 views

Cross site scripting

3.5CVSS5.7AI score0.00422EPSS

SaveExploits0References2Affected Software1

Prion•added 2022/04/18 5:15 p.m.•19 views

Design/Logic Flaw

7.9CVSS7.8AI score0.00419EPSS

SaveExploits0References2Affected Software1

CVE•added 2022/04/18 4:20 p.m.•99 views

CVE-2021-23286

CVE-2021-23286 affects Eaton’s IPM Infrastructure (IPM Infrastructure), across all versions up to 1.5.0plus205. The connected ICS/IR sources confirm a vulnerability in CSV formula handling (CSV Formula Injection) due to improper sanitization of imported CSV files. Exploitation requires access to ...

8CVSS6.5AI score0.00419EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2022/04/18 4:20 p.m.•40 views

CVE-2021-23286 Security issues in Eaton Intelligent Power Manager Infrastructure

5.7CVSS8AI score0.00419EPSS

SaveExploits0References2

Cvelist•added 2022/04/18 4:20 p.m.•40 views

CVE-2021-23284 Security issues in Eaton Intelligent Power Manager Infrastructure

5.7CVSS5.6AI score0.00503EPSS

SaveExploits0References2

CVE•added 2022/04/18 4:20 p.m.•96 views

CVE-2021-23284

The CVE-2021-23284 entry affects Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure): all versions up to 1.5.0plus205 are vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. Connected sources (ICS A...

5.7CVSS5.3AI score0.00503EPSS

SaveExploits0References2Affected Software1

CVE•added 2022/04/18 4:20 p.m.•86 views

CVE-2021-23285

CVE-2021-23285 affects Eaton IPM Infrastructure (1.5.0plus205 and earlier). It is a reflected Cross-site Scripting vulnerability due to insufficient input validation in web page generation. Exploitation would require access to the local subnet and administrator interaction (per connected ICS/ECMA...

4.8CVSS4.7AI score0.00422EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2022/04/18 4:20 p.m.•43 views

CVE-2021-23285 Security issues in Eaton Intelligent Power Manager Infrastructure

3.1CVSS5.3AI score0.00422EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by