PatchTheCVECVEs published by Schweitzer Engineering Laboratories, Inc.
CVEs published by Schweitzer Engineering Laboratories, Inc. (CVE Numbering Authority). 14 tracked.
- CVE-2025-46750 MEDIUM 4.4 SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authenticat
- CVE-2025-46749 MEDIUM 4.3 An authenticated user could submit scripting to fields that lack proper input and output sanitization leading
- CVE-2025-46748 LOW 2.7 An authenticated user attempting to change their password could do so without using the current password.
- CVE-2025-46747 MEDIUM 5.7 An authenticated user without user-management permissions could identify other user accounts.
- CVE-2025-46746 MEDIUM 5.8 An administrator could discover another account's credentials.
- CVE-2025-46745 MEDIUM 6.5 An authenticated user without user-management permissions could view other users account information.
- CVE-2025-46744 LOW 2.7 An authenticated administrator could modify the Created By username for a user account
- CVE-2025-46743 MEDIUM 6.3 An authenticated user's token could be used by another source after the user had logged out prior to the token
- CVE-2025-46742 MEDIUM 4.3 Users who were required to change their password could still access system information before changing their p
- CVE-2025-46741 MEDIUM 5.7 A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period oc
- CVE-2025-46740 HIGH 7.5 An authenticated user without user administrative permissions could change the administrator Account Name.
- CVE-2025-46739 HIGH 8.1 An unauthenticated user could discover account credentials via a brute-force attack without rate limiting
- CVE-2025-46738 MEDIUM 6.6 An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to e
- CVE-2025-46737 HIGH 7.4 SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS) configuration fo