Advisories · Technology

CyberPower PowerPanel Enterprise.

Every CVE that names CyberPower PowerPanel Enterprise among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-32739 CVE record

CVSS 7.5 High

CyberPower PowerPanel Enterprise SQL Injection
- CyberPower PowerPanel Enterprise
- SQL injection
Not analysed yet 9 May 2024
CVE-2024-32738 CVE record

CVSS 7.5 High

CyberPower PowerPanel Enterprise SQL Injection
- CyberPower PowerPanel Enterprise
- SQL injection
Not analysed yet 9 May 2024
CVE-2024-32737 CVE record

CVSS 7.5 High

CyberPower PowerPanel Enterprise SQL Injection
- CyberPower PowerPanel Enterprise
- SQL injection
Not analysed yet 9 May 2024
CVE-2024-32736 CVE record

CVSS 7.5 High

CyberPower PowerPanel Enterprise SQL Injection
- CyberPower PowerPanel Enterprise
- SQL injection
Not analysed yet 9 May 2024
CVE-2024-32735 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

CyberPower PowerPanel Enterprise Missing Authentication
- CyberPower PowerPanel Enterprise
- Authentication bypass
Not analysed yet 9 May 2024
CVE-2023-3267 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

OS command injection in CyberPower PowerPanel Enterprise
- CyberPower PowerPanel Enterprise
- Command injection
Not analysed yet 14 Aug 2023
CVE-2023-3266 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

CyberPower PowerPanel Enterprise: A non-feature complete authentication mechanism exists in the production application…
- CyberPower PowerPanel Enterprise
- CWE-358
Not analysed yet 14 Aug 2023
CVE-2023-3265 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

CyberPower PowerPanel Enterprise: An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to…
- CyberPower PowerPanel Enterprise
- CWE-150
Not analysed yet 14 Aug 2023