Skip to content

Deltaww · weakness class

SQL Injection

13 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
3

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

  1. The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.CVE-2022-43775Deltaww · CVSS 9.8 · 22% likely

    CWE-89

  2. A Blind SQL injection vulnerability exists in the /DataHandler/HandlerEnergyType.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not pr…CVE-2021-38390Deltaww · 20% likely

    CWE-89

  3. A Blind SQL injection vulnerability exists in the /DataHandler/HandlerAlarmGroup.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not pr…CVE-2021-38393Deltaww · 18% likely

    CWE-89

  4. A Blind SQL injection vulnerability exists in the /DataHandler/Handler_CFG.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not properly…CVE-2021-32983Deltaww · 3.9% likely

    CWE-89

  5. A Blind SQL injection vulnerability exists in the /DataHandler/AM/AM_Handler.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not proper…CVE-2021-38391Deltaww · 3.5% likely

    CWE-89

  6. The HandlerPageP_KID class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.CVE-2022-43774Deltaww · CVSS 9.8 · 0.9% likely

    CWE-89

  7. DIAEnergie - SQL InjectionCVE-2026-78317deltaww · CVSS 8.8 · 0.7% likely

    CWE-89

  8. DIAEnergie - SQL InjectionCVE-2026-78316deltaww · CVSS 8.8 · 0.7% likely

    CWE-89

  9. DIAEnergie - SQL InjectionCVE-2026-78315deltaww · CVSS 8.8 · 0.7% likely

    CWE-89

  10. DIAEnergie - SQL InjectionCVE-2026-78314deltaww · CVSS 8.8 · 0.7% likely

    CWE-89

  11. SQL Injection in DIAEnergieCVE-2026-78309Deltaww · CVSS 8.8 · 0.3% likely

    CWE-89

  12. SQL Injection in DIAEnergieCVE-2026-78311Deltaww · CVSS 8.8 · 0.2% likely

    CWE-89

  13. DIAEnergie - SQL Injection VulnerabilityCVE-2026-125612Deltaww · CVSS 8.8 · 0.2% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.