What’s Vulnerable › Products

Secomea Gatemanager 4260 Firmware vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Secomea Gatemanager 4260 Firmware version is affected

Latest Secomea Gatemanager 4260 Firmware vulnerabilities

• CVE-2022-25787 — GTA URLs issued by LMM WEB API may leak information (CVSS 6.7)
• CVE-2022-25783 — Hacking attempts from logged-in users are not properly logged by GM (CVSS 4.3)
• CVE-2022-25782 — Insufficient privilege checks on object access and updates. (CVSS 5.4)
• CVE-2022-25781 — Reflected XSS issues in GateManager (CVSS 6.1)
• CVE-2022-25780 — Information leak via device availability query function (CVSS 4.3)
• CVE-2022-25779 — Insufficient scope checks allows adding unrelated audit log entries (CVSS 4.3)
• CVE-2022-25778 — Unload handlers may unintentionally defeat CSRF guards (CVSS 8.8)
• CVE-2021-32010 — Clients may connect to a GateManager with TLS 1.0 (CVSS 8.1)
• CVE-2020-29024 — Missing HtppOnly and Secure flags (CVSS 5.3)
• CVE-2020-29023 — CSV Formula Injection possible due to improper fields escaping in GateManager (CVSS 3.5)
• CVE-2020-29022 — Host Header Injection allowing web cache poisoning attacks (CVSS 5.3)
• CVE-2020-29031 — Insecure Direct Object Reference in GateManager WebUI can cause privilege escalation (CVSS 8.1)
• CVE-2020-29026 — (CVSS 6.5)
• CVE-2020-29021 — Scripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS) (CVSS 4.8)