Approved changes feed: RSS · Atom

cpe:2.3:a:cyberpower:cyberpower_powerpanel_enterprise:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCyberpower (2a62c9be-26e1-571c-92ea-27ab54316d46)
ProductCyberpower Powerpanel Enterprise (0bffc737-1613-523d-8ed0-e23a5fab9e01)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32739 vulnerable 2026-06-08 06:37:23.751595 CyberPower PowerPanel Enterprise SQL Injection
HIGH (7.5)
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "query_ptask_verbose" function within MCUDBHelper.
Published: 2024-05-09T14:58:30.263Z
Updated: 2025-03-28T19:02:37.662Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32738 vulnerable 2026-06-08 06:37:23.751207 CyberPower PowerPanel Enterprise SQL Injection
HIGH (7.5)
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "query_ptask_lean" function within MCUDBHelper.
Published: 2024-05-09T14:58:13.209Z
Updated: 2024-08-02T02:20:35.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32737 vulnerable 2026-06-08 06:37:23.750581 CyberPower PowerPanel Enterprise SQL Injection
HIGH (7.5)
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "query_contract_result" function within MCUDBHelper.
Published: 2024-05-09T14:57:57.579Z
Updated: 2024-08-02T02:20:35.316Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32736 vulnerable 2026-06-08 06:37:23.750166 CyberPower PowerPanel Enterprise SQL Injection
HIGH (7.5)
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "query_utask_verbose" function within MCUDBHelper.
Published: 2024-05-09T14:57:38.850Z
Updated: 2025-03-25T18:10:55.407Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32735 vulnerable 2026-06-08 06:37:23.748718 CyberPower PowerPanel Enterprise Missing Authentication
CRITICAL (9.8)
An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can access the PDNU REST APIs, which may result in compromise of the application.
Published: 2024-05-09T14:54:45.407Z
Updated: 2024-08-02T02:20:35.343Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.