Approved changes feed: RSS · Atom

cpe:2.3:a:cyberpower:powerpanel_enterprise:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCyberpower (2a62c9be-26e1-571c-92ea-27ab54316d46)
ProductPowerpanel Enterprise (fd3028cb-baa0-5431-8067-85e786b4dd8f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32739 vulnerable 2026-06-08 06:37:23.751558 CyberPower PowerPanel Enterprise SQL Injection
HIGH (7.5)
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "query_ptask_verbose" function within MCUDBHelper.
Published: 2024-05-09T14:58:30.263Z
Updated: 2025-03-28T19:02:37.662Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32738 vulnerable 2026-06-08 06:37:23.751058 CyberPower PowerPanel Enterprise SQL Injection
HIGH (7.5)
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "query_ptask_lean" function within MCUDBHelper.
Published: 2024-05-09T14:58:13.209Z
Updated: 2024-08-02T02:20:35.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32737 vulnerable 2026-06-08 06:37:23.750543 CyberPower PowerPanel Enterprise SQL Injection
HIGH (7.5)
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "query_contract_result" function within MCUDBHelper.
Published: 2024-05-09T14:57:57.579Z
Updated: 2024-08-02T02:20:35.316Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32736 vulnerable 2026-06-08 06:37:23.750111 CyberPower PowerPanel Enterprise SQL Injection
HIGH (7.5)
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "query_utask_verbose" function within MCUDBHelper.
Published: 2024-05-09T14:57:38.850Z
Updated: 2025-03-25T18:10:55.407Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32735 vulnerable 2026-06-08 06:37:23.747432 CyberPower PowerPanel Enterprise Missing Authentication
CRITICAL (9.8)
An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can access the PDNU REST APIs, which may result in compromise of the application.
Published: 2024-05-09T14:54:45.407Z
Updated: 2024-08-02T02:20:35.343Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3267 vulnerable 2026-06-08 06:09:39.030816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3266 vulnerable 2026-06-08 06:09:39.030318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3265 vulnerable 2026-06-08 06:09:39.029823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.