vciy

Delta Electronics DIAEnergie: 26 records in one advisory

26 records announced together, published between 2022-03-29 and 2022-05-02, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

All 26 records publish a fixed version.

No record in this batch is listed by CISA in held sources.

Every record names something of its own, listed against it below.

Most commonly mapped weakness across the batch: CWE-89 SQL Injection.

What this page does not cover

This batch is 26 of the 29 records that cite the same advisory. The other 3 are different findings announced alongside it.

None of those 3 is grouped with any other. Each one has its own record page and nothing else.

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2022-0923Delta Electronics DIAEnergie SQL Injection in HandlerDialog_KID.ashxCWE-89 SQL Injection
CVE-2022-1366handlerchart.ashxCWE-89 SQL Injection
CVE-2022-1367handler_tcv.ashxCWE-89 SQL Injection
CVE-2022-1369readregindCWE-89 SQL Injection
CVE-2022-1370readregbyidCWE-89 SQL Injection
CVE-2022-1371readregfCWE-89 SQL Injection
CVE-2022-1372dlslog.aspxCWE-89 SQL Injection
CVE-2022-1374diae_unhandler.ashxCWE-89 SQL Injection
CVE-2022-1375diae_sloghandler.ashxCWE-89 SQL Injection
CVE-2022-1376diae_privgrphandler.ashxCWE-89 SQL Injection
CVE-2022-1377diae_rlthandler.ashxCWE-89 SQL Injection
CVE-2022-1378diae_pghandler.ashxCWE-89 SQL Injection
CVE-2022-25880Delta Electronics DIAEnergie SQL Injection in DIAE_hierarchyHandler.ashxCWE-89 SQL Injection
CVE-2022-25980Delta Electronics DIAEnergie SQL Injection in HandlerCommon.ashxCWE-89 SQL Injection
CVE-2022-26013Delta Electronics DIAEnergie SQL Injection in DIAE_dmdsetHandler.ashxCWE-89 SQL Injection
CVE-2022-26059Delta Electronics DIAEnergie SQL Injection in GetQueryDataCWE-89 SQL Injection
CVE-2022-26065Delta Electronics DIAEnergie SQL Injection in GetLatestDemandNode and GetDemandAnalysisDataCWE-89 SQL Injection
CVE-2022-26069Delta Electronics DIAEnergie SQL Injection in HandlerPage_KID.ashxCWE-89 SQL Injection
CVE-2022-26338Delta Electronics DIAEnergie SQL Injection in DIAE_hierarchyHandler.ashxCWE-89 SQL Injection
CVE-2022-26349Delta Electronics DIAEnergie SQL Injection in DIAE_eccoefficientHandler.ashxCWE-89 SQL Injection
CVE-2022-26514Delta Electronics DIAEnergie SQL Injection in DIAE_tagHandler.ashxCWE-89 SQL Injection
CVE-2022-26666Delta Electronics DIAEnergie SQL Injection in HandlerDialogECC.ashxCWE-89 SQL Injection
CVE-2022-26667Delta Electronics DIAEnergie SQL Injection in GetDemandAnalysisDataCWE-89 SQL Injection
CVE-2022-26836Delta Electronics DIAEnergie SQL Injection in HandlerExport.ashx/Calendar.ashxCWE-89 SQL Injection
CVE-2022-26887Delta Electronics DIAEnergie SQL Injection in DIAE_HandlerTag_KID.ashxCWE-89 SQL Injection
CVE-2022-27175Delta Electronics DIAEnergie SQL Injection in GetCalcTagListCWE-89 SQL Injection

26 records, read from the index as it stood on 2026-09-20. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.