Ipp Software
Approved changes feed: RSS · Atom
cpe:2.3:a:eaton:ipp_software:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Eaton (b7450635-db8f-5426-bd84-6f4be38222d9) |
|---|---|
| Product | Ipp Software (00fad979-45ce-57f4-9148-22940d11f552) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-22619 |
vulnerable | 2026-06-08 07:51:13.314370 |
Details available
HIGH (7.8)
Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code execution by an attacker with access to the software package. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download center.
Published: 2026-04-16T05:26:48.952Z
Updated: 2026-04-16T12:59:37.700Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22618 |
vulnerable | 2026-06-08 07:51:13.313937 |
Details available
MEDIUM (5.9)
A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecure attribute, potentially exposing users to web‑based attacks. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.
Published: 2026-04-16T05:11:06.548Z
Updated: 2026-04-16T13:10:01.651Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22617 |
vulnerable | 2026-06-08 07:51:13.313519 |
Details available
MEDIUM (5.7)
Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.
Published: 2026-04-16T05:02:07.710Z
Updated: 2026-04-16T13:23:29.510Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22616 |
vulnerable | 2026-06-08 07:51:13.313053 |
Details available
MEDIUM (6.5)
Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting controls. This security issue has been fixed in the latest version of Eaton IPP which is available on the Eaton download centre.
Published: 2026-04-16T04:54:48.148Z
Updated: 2026-04-16T13:30:12.024Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22615 |
vulnerable | 2026-06-08 07:51:13.311680 |
Details available
MEDIUM (6)
Due to improper
input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is
possible for an attacker with admin privileges and access to the local system to
inject malicious code resulting in arbitrary command execution. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.
Published: 2026-04-16T04:45:58.055Z
Updated: 2026-04-16T12:59:58.829Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.