Delta RM
by Delta RM
CVEs (17)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-15359 | Cri | 0.59 | 9.1 | 0.00 | Dec 30, 2025 | DVP-12SE11T - Out-of-bound memory write Vulnerability | ||
| CVE-2025-15102 | Cri | 0.59 | 9.1 | 0.00 | Dec 30, 2025 | DVP-12SE11T - Password Protection Bypass | ||
| CVE-2025-15103 | Hig | 0.53 | 8.1 | 0.00 | Dec 30, 2025 | DVP-12SE11T - Authentication Bypass via Partial Password Disclosure | ||
| CVE-2025-15358 | Hig | 0.49 | 7.5 | 0.00 | Dec 30, 2025 | DVP-12SE11T - Denial of Service Vulnerability | ||
| CVE-2025-62578 | Hig | 0.49 | 7.5 | 0.00 | Dec 26, 2025 | DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information | ||
| CVE-2021-44839 | Med | 0.42 | 6.5 | 0.01 | Jan 18, 2022 | An issue was discovered in Delta RM 1.2. It is possible to request a new password for any other account using the account ID. Using the /listes/DTsendmaildata/adm_utilisateur/send-mail.json endpoint, a user can send a JSON array with user IDs that will have their passwords reset… | ||
| CVE-2017-14600 | Med | 0.32 | 4.9 | 0.01 | Sep 19, 2017 | Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $_GET['del_black'], resulting in Information Disclosure. | ||
| CVE-2021-44837 | Med | 0.28 | 4.3 | 0.01 | Jan 19, 2022 | An issue was discovered in Delta RM 1.2. It is possible for an unprivileged user to access the same information as an admin user regarding the risk creation information in the /risque/administration/referentiel/json/create/categorie endpoint, using the id_cat1 query parameter to… | ||
| CVE-2021-44838 | Med | 0.28 | 4.3 | 0.01 | Jan 18, 2022 | An issue was discovered in Delta RM 1.2. Using the /risque/risque/ajax-details endpoint, with a POST request indicating the risk to access with the id parameter, it is possible for users to access risks of other companies. | ||
| CVE-2021-44836 | Med | 0.28 | 4.3 | 0.01 | Jan 18, 2022 | An issue was discovered in Delta RM 1.2. The /risque/risque/workflow/reset endpoint is lacking access controls, and it is possible for an unprivileged user to reopen a risk with a POST request, using the risqueID parameter to identify the risk to be re-opened. | ||
| CVE-2021-44840 | Low | 0.18 | 2.7 | 0.01 | Jan 18, 2022 | An issue was discovered in Delta RM 1.2. Using an privileged account, it is possible to edit, create, and delete risk labels, such as Criticality and Priority Indication labels. By using the /core/table/query endpoint, and by using a POST request and indicating the affected… | ||
| CVE-2026-12577 | Hig | 0.00 | — | 0.00 | Jul 1, 2026 | DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability. | ||
| CVE-2026-12576 | Hig | 0.00 | 7.5 | 0.00 | Jul 1, 2026 | DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability. | ||
| CVE-2026-12575 | Hig | 0.00 | 7.5 | 0.00 | Jul 1, 2026 | DVP80ES3 with Improper Resource Shutdown or Release vulnerability. | ||
| CVE-2026-14193 | Hig | 0.00 | 7.5 | 0.00 | Jul 1, 2026 | DVP80ES300T with Improper Validation of Array Index Vulnerability | ||
| CVE-2026-12579 | Hig | 0.00 | 7.4 | 0.00 | Jul 1, 2026 | AS228T with Authentication Bypass Vulnerability | ||
| CVE-2015-1471 | 0.00 | — | 0.04 | Feb 12, 2015 | SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI. |
- risk 0.59cvss 9.1epss 0.00
DVP-12SE11T - Out-of-bound memory write Vulnerability
- risk 0.59cvss 9.1epss 0.00
DVP-12SE11T - Password Protection Bypass
- risk 0.53cvss 8.1epss 0.00
DVP-12SE11T - Authentication Bypass via Partial Password Disclosure
- risk 0.49cvss 7.5epss 0.00
DVP-12SE11T - Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.00
DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information
- risk 0.42cvss 6.5epss 0.01
An issue was discovered in Delta RM 1.2. It is possible to request a new password for any other account using the account ID. Using the /listes/DTsendmaildata/adm_utilisateur/send-mail.json endpoint, a user can send a JSON array with user IDs that will have their passwords reset…
- risk 0.32cvss 4.9epss 0.01
Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $_GET['del_black'], resulting in Information Disclosure.
- risk 0.28cvss 4.3epss 0.01
An issue was discovered in Delta RM 1.2. It is possible for an unprivileged user to access the same information as an admin user regarding the risk creation information in the /risque/administration/referentiel/json/create/categorie endpoint, using the id_cat1 query parameter to…
- risk 0.28cvss 4.3epss 0.01
An issue was discovered in Delta RM 1.2. Using the /risque/risque/ajax-details endpoint, with a POST request indicating the risk to access with the id parameter, it is possible for users to access risks of other companies.
- risk 0.28cvss 4.3epss 0.01
An issue was discovered in Delta RM 1.2. The /risque/risque/workflow/reset endpoint is lacking access controls, and it is possible for an unprivileged user to reopen a risk with a POST request, using the risqueID parameter to identify the risk to be re-opened.
- risk 0.18cvss 2.7epss 0.01
An issue was discovered in Delta RM 1.2. Using an privileged account, it is possible to edit, create, and delete risk labels, such as Criticality and Priority Indication labels. By using the /core/table/query endpoint, and by using a POST request and indicating the affected…
- risk 0.00cvss —epss 0.00
DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability.
- risk 0.00cvss 7.5epss 0.00
DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability.
- risk 0.00cvss 7.5epss 0.00
DVP80ES3 with Improper Resource Shutdown or Release vulnerability.
- risk 0.00cvss 7.5epss 0.00
DVP80ES300T with Improper Validation of Array Index Vulnerability
- risk 0.00cvss 7.4epss 0.00
AS228T with Authentication Bypass Vulnerability
- CVE-2015-1471Feb 12, 2015risk 0.00cvss —epss 0.04
SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI.