What’s Vulnerable › Products
Secomea GateManager all versions prior to 9.2c vulnerabilities
20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.
Check whether your Secomea GateManager all versions prior to 9.2c version is affected
Latest Secomea GateManager all versions prior to 9.2c vulnerabilities
- CVE-2022-25787 — GTA URLs issued by LMM WEB API may leak information (CVSS 6.7)
- CVE-2022-25783 — Hacking attempts from logged-in users are not properly logged by GM (CVSS 4.3)
- CVE-2022-25782 — Insufficient privilege checks on object access and updates. (CVSS 5.4)
- CVE-2022-25781 — Reflected XSS issues in GateManager (CVSS 6.1)
- CVE-2022-25780 — Information leak via device availability query function (CVSS 4.3)
- CVE-2022-25779 — Insufficient scope checks allows adding unrelated audit log entries (CVSS 4.3)
- CVE-2022-25778 — Unload handlers may unintentionally defeat CSRF guards (CVSS 8.8)
- CVE-2021-32010 — Clients may connect to a GateManager with TLS 1.0 (CVSS 8.1)
- CVE-2021-32004 — GateManager does not enforce strict hostname matching for WEB server (CVSS 5.3)
- CVE-2020-29032 — Add integrity check of GateManager firmware (CVSS 7.2)
- CVE-2020-29024 — Missing HtppOnly and Secure flags (CVSS 5.3)
- CVE-2020-29023 — CSV Formula Injection possible due to improper fields escaping in GateManager (CVSS 3.5)
- CVE-2020-29022 — Host Header Injection allowing web cache poisoning attacks (CVSS 5.3)
- CVE-2020-29031 — Insecure Direct Object Reference in GateManager WebUI can cause privilege escalation (CVSS 8.1)
- CVE-2020-29026 — (CVSS 6.5)
- CVE-2020-29021 — Scripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS) (CVSS 4.8)
- CVE-2020-14512 — USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916 (CVSS 7.5)
- CVE-2020-14510 — OFF-BY-ONE ERROR CWE-193 (CVSS 9.8)
- CVE-2020-14508 — OFF-BY-ONE ERROR CWE-193 (CVSS 9.8)
- CVE-2020-14500 — IMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158 (CVSS 9.8)