Sunbirddcim operates a data-center infrastructure management and monitoring platform spanning products such as DCTrack and Power IQ, which serve as centralized visibility and control systems for physical and power assets. The vendor's vulnerability disclosures cluster around application-layer input-handling and authorization weaknesses including cross-site scripting, SQL injection, cross-site request forgery, code injection, and improper access control, reflecting the web-facing and database-driven nature of these management tools. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Sunbirddcim over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-37774HIGH A Cross-Site Request Forgery (CSRF) in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive | Dec 16, 2024 | 8.0 | 24 | NO | NO |
CVE-2024-37775HIGH Incorrect access control in Sunbird DCIM dcTrack v9.1.2 allows attackers to create or update a ticket with a location which bypasses an RBAC check. | Dec 16, 2024 | 7.5 | 23 | NO | NO |
CVE-2024-37776MEDIUM A cross-site scripting (XSS) vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in some admin screens. | Dec 16, 2024 | 4.8 | 18 | NO | NO |
CVE-2024-37773MEDIUM An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen. | Dec 16, 2024 | 4.8 | 18 | NO | NO |
An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input v | Dec 15, 2025 | 3.3 | 16 | NO | NO |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Sunbirddcim.
Media articles that mention a CVE ID that affects a product developed by Sunbirddcim — matched by CVE ID, not by vendor name.