SEL

Latest CVEs · RSS

• CVE-2025-48018 2025-05-20 · CVSS 7.5
  An authenticated user can modify application state data.
• CVE-2025-48017 2025-05-20 · CVSS 9.0
  Improper limitation of pathname in Circuit Provisioning and File Import applications allows modification and uploading of files
• CVE-2025-48016 2025-05-20 · CVSS 4.3
  OpenFlow discovery protocol can exhaust resources because it is not rate limited
• CVE-2025-48015 2025-05-20 · CVSS 3.7
  Failed login response could be different depending on whether the username was local or central.
• CVE-2025-48014 2025-05-20 · CVSS 7.5
  Password guessing limits could be bypassed when using LDAP authentication.
• CVE-2025-46743 2025-05-12 · CVSS 6.3
  An authenticated user's token could be used by another source after the user had logged out prior to the token expiring.
• CVE-2025-46750 2025-05-12 · CVSS 4.4
  SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected BIOS settings b
• CVE-2025-46749 2025-05-12 · CVSS 4.3
  An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side script execution.
• CVE-2025-46748 2025-05-12 · CVSS 2.7
  An authenticated user attempting to change their password could do so without using the current password.
• CVE-2025-46747 2025-05-12 · CVSS 5.7
  An authenticated user without user-management permissions could identify other user accounts.
• CVE-2025-46746 2025-05-12 · CVSS 5.8
  An administrator could discover another account's credentials.
• CVE-2025-46745 2025-05-12 · CVSS 6.5
  An authenticated user without user-management permissions could view other users account information.
• CVE-2025-46744 2025-05-12 · CVSS 2.7
  An authenticated administrator could modify the Created By username for a user account
• CVE-2025-46742 2025-05-12 · CVSS 4.3
  Users who were required to change their password could still access system information before changing their password
• CVE-2025-46741 2025-05-12 · CVSS 5.7
  A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred.
• CVE-2025-46740 2025-05-12 · CVSS 7.5
  An authenticated user without user administrative permissions could change the administrator Account Name.
• CVE-2025-46739 2025-05-12 · CVSS 8.1
  An unauthenticated user could discover account credentials via a brute-force attack without rate limiting
• CVE-2025-46738 2025-05-12 · CVSS 6.6
  An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code.
• CVE-2025-46737 2025-05-12 · CVSS 7.4
  SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS) configuration for a data gateway service in the application. This
• CVE-2024-2103 2024-04-04 · CVSS 6.5
  Inclusion of undocumented features vulnerability accessible when logged on with a privileged access level on the following Schweitzer Engineering Laboratories
• CVE-2023-2267 2023-11-30 · CVSS 4.3
  An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an auth
• CVE-2023-2266 2023-11-30 · CVSS 4.3
  An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-sit
• CVE-2023-2265 2023-11-30 · CVSS 4.3
  An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform c
• CVE-2023-2264 2023-11-30 · CVSS 4.0
  An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to c
• CVE-2023-34390 2023-11-30 · CVSS 4.5
  An input validation vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to create a denial of service a