Lucene search
K

4 matches found

Packet Storm
Packet Storm
added 2026/04/27 12:0 a.m.64 views

📄 SolarEdge 3.0-2021 Cross Site Request Forgery / OOB Injection

SolarEdge version 3.0-2021 suffers from a cross site request forgery vulnerability in the /solaredge-web/p/initClient that can lead to a remote command injection vulnerability. Titles: solaredge-CSRF-OOB-Injection 3.0-2021 web portal Author: nu11secur1tyAI Date: 2026-04-26 Vendor: SolarEdge...

5.3AI score
Exploits0
Vulnrichment
Vulnrichment
added 2025/12/12 3:5 p.m.3 views

CVE-2025-36746 SolarEdge Monitoring Platform contains a XSS upon report deletion

SolarEdge monitoring platform contains a Cross‑Site Scripting XSS flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s browser during a deletion attempt...

4.8CVSS5.9AI score0.00024EPSS
Exploits0References2
CVE
CVE
added 2025/12/12 3:5 p.m.6 views

CVE-2025-36746

SolarEdge Monitoring Platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s browser during a deletion attempt. The affected product is the SolarEdge Monitoring Platform; the vulnerability is trigg...

5.4CVSS5.8AI score0.00024EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.5 views

SolarEdge Monitoring platform 安全漏洞

The SolarEdge Monitoring platform is a monitoring platform from the Israeli company SolarEdge. A security vulnerability exists in the SolarEdge Monitoring platform that stems from a cross-site scripting flaw that could cause a victim's browser to execute malicious code...

5.4CVSS6.2AI score0.00024EPSS
Exploits0References2
Rows per page
Query Builder