Eskom vulnerabilities
We track 4 vulnerabilities in Eskom products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 28, 2023.
Latest Eskom vulnerabilities
- 7.5 High severity
e-municipality module: Incorrect Use of Privileged APIs
Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users. This issue affects e-municipality module: before v.105.
- 7.5 High severity
e-municipality module: Incorrect Use of Privileged APIs
Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users. This issue affects e-municipality module: before v.105.
- 9.8 Critical severity
Water Metering Software: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection. This issue affects Water Metering Software: before 23.04.06.
- 9.8 Critical severity
e-Belediye: Missing Authorization
Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation. This issue affects e-Belediye: from 1.0.0.95 before 1.0.0.100.