sunbirddcim records
5 published records for vendor sunbirddcim.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-863 Incorrect Authorization1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2024-37774No exploit | A Cross-Site Request Forgery (CSRF) in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing ansunbirddcim · dctrack · CWE-352 | High8.0 | — | 0.1% | Dec 16, 2024 |
30Monitor | CVE-2024-37775No exploit | Incorrect access control in Sunbird DCIM dcTrack v9.1.2 allows attackers to create or update a ticket with a location which bypasses an RBACsunbirddcim · dctrack · CWE-863 | High7.5 | — | 0.4% | Dec 16, 2024 |
19Monitor | CVE-2024-37776No exploit | A cross-site scripting (XSS) vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to execute arbitrary web scripts or HTML via a crsunbirddcim · dctrack · CWE-79 | Medium4.8 | — | 0.3% | Dec 16, 2024 |
19Monitor | CVE-2024-37773No exploit | An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML codesunbirddcim · dctrack · CWE-94 | Medium4.8 | — | 0.2% | Dec 16, 2024 |
13Monitor | CVE-2025-55703No exploit | An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API.sunbirddcim · power iq · CWE-89 | Low3.3 | — | 0.1% | Dec 15, 2025 |
- CVE-2024-3777432Monitor
A Cross-Site Request Forgery (CSRF) in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an
HighCVSS 8.0No exploitEPSS 0%sunbirddcim · dctrackDec 16, 2024
- CVE-2024-3777530Monitor
Incorrect access control in Sunbird DCIM dcTrack v9.1.2 allows attackers to create or update a ticket with a location which bypasses an RBAC
HighCVSS 7.5No exploitEPSS 0%sunbirddcim · dctrackDec 16, 2024
- CVE-2024-3777619Monitor
A cross-site scripting (XSS) vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to execute arbitrary web scripts or HTML via a cr
MediumCVSS 4.8No exploitEPSS 0%sunbirddcim · dctrackDec 16, 2024
- CVE-2024-3777319Monitor
An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code
MediumCVSS 4.8No exploitEPSS 0%sunbirddcim · dctrackDec 16, 2024
- CVE-2025-5570313Monitor
An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API.
LowCVSS 3.3No exploitEPSS 0%sunbirddcim · power iqDec 15, 2025