Advisories · Technology

Growatt Cloud portal.

Every CVE that names Growatt Cloud portal among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-27929 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-24315 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-27561 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-30257 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-31147 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-31360 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-30512 CVE record

CVSS 6.9 Medium

Growatt Cloud portal External Control of System or Configuration Setting
- Growatt Cloud portal
- CWE-15
Not analysed yet 15 Apr 2025
CVE-2025-27927 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-24297 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Growatt Cloud portal Cross-site Scripting
- Growatt Cloud portal
- Cross-site scripting (XSS)
Not analysed yet 15 Apr 2025
CVE-2025-30510 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Growatt Cloud portal Insufficient Type Distinction
- Growatt Cloud portal
- CWE-351
Not analysed yet 15 Apr 2025
CVE-2025-24850 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-25276 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-27565 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-27575 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-31950 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-31945 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-26857 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-27719 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-31654 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-30514 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-27938 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-27939 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-30254 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-27568 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-24487 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-31941 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-31357 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-31949 CVE record

CVSS 6.9 Medium

Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-31933 CVE record

CVSS 6.9 Medium

Growatt Cloud Applications Authorization Bypass Through User-Controlled Key
- Growatt Cloud portal
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-30511 CVE record

CVSS 8.7 High

Growatt Cloud Applications Cross-site Scripting
- Growatt Cloud portal
- Cross-site scripting (XSS)
Not analysed yet 15 Apr 2025