security@selinc.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS security@selinc.com
03
assessed vulnerabilities (60)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-48018US | — | — | ||
An authenticated user can modify application state data. | ||||
| CVE-2025-48017US | — | — | ||
Improper limitation of pathname in Circuit Provisioning and File Import applications allows modification and uploading of files | ||||
| CVE-2025-48016US | — | — | ||
OpenFlow discovery protocol can exhaust resources because it is not rate limited | ||||
| CVE-2025-48015US | — | — | ||
Failed login response could be different depending on whether the username was local or central. | ||||
| CVE-2025-48014US | — | — | ||
Password guessing limits could be bypassed when using LDAP authentication. | ||||
| CVE-2025-46750US | — | — | ||
SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected BIOS settings by importing a BIOS s… | ||||
| CVE-2025-46749US | — | — | ||
An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side script execution. | ||||
| CVE-2025-46748US | — | — | ||
An authenticated user attempting to change their password could do so without using the current password. | ||||
| CVE-2025-46747US | — | — | ||
An authenticated user without user-management permissions could identify other user accounts. | ||||
| CVE-2025-46746US | — | — | ||
An administrator could discover another account's credentials. | ||||
| CVE-2025-46745US | —OT elevated | — | ||
An authenticated user without user-management permissions could view other users account information. | ||||
| CVE-2025-46744US | —OT elevated | — | ||
An authenticated administrator could modify the Created By username for a user account | ||||
| CVE-2025-46743US | — | — | ||
An authenticated user's token could be used by another source after the user had logged out prior to the token expiring. | ||||
| CVE-2025-46742US | — | — | ||
Users who were required to change their password could still access system information before changing their password | ||||
| CVE-2025-46741US | — | — | ||
A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred. | ||||
| CVE-2025-46740US | — | — | ||
An authenticated user without user administrative permissions could change the administrator Account Name. | ||||
| CVE-2025-46739US | — | — | ||
An unauthenticated user could discover account credentials via a brute-force attack without rate limiting | ||||
| CVE-2025-46738US | — | — | ||
An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code. | ||||
| CVE-2025-46737US | — | — | ||
SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS) configuration for a data gateway service in the application. This gateway service incl… | ||||
| CVE-2024-2103US | — | — | ||
Inclusion of undocumented features vulnerability accessible when logged on with a privileged access level on the following Schweitzer Engineering Laboratories relays could allow t… | ||||