Secomea

Latest CVEs · RSS

• CVE-2026-1759 2026-09-15 · CVSS 6.5
  Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation. This issue affects GateManager: 1
• CVE-2026-1758 2026-09-15 · CVSS 8.3
  Session fixation vulnerability in Secomea GateManager (webserver module) allows Session Fixation. This issue affects GateManager: 11.5;0, 11.4.625515072:0.
• CVE-2025-14716 2026-03-19 · CVSS 6.5
  Improper Authentication vulnerability in Secomea GateManager (webserver modules) allows Authentication Bypass.This issue affects GateManager: 11.4;0.
• CVE-2021-32007 2024-12-13 · CVSS 3.5
  This issue affects: Secomea GateManager Version 9.5 and all prior versions. Protection Mechanism Failure vulnerability in web server of Secomea GateManager to p
• CVE-2024-1969 2024-04-29 · CVSS 8.2
  Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Secomea GateManager (webserver modules) allows crash of GateManager.This
• CVE-2024-1579 2024-04-29 · CVSS 8.1
  Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Secomea GateManager (Webserver modules) allows Session Hijacking.This issue a
• CVE-2023-3675 2024-04-18 · CVSS 6.5
  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Secomea GateManager (Web GUI) allows Reading Data from System Re
• CVE-2023-2912 2023-07-17 · CVSS 5.9
  Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction.
• CVE-2022-38125 2023-04-19 · CVSS 2.9
  Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client.
• CVE-2023-0317 2023-04-19 · CVSS 4.9
  Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information.
• CVE-2022-4308 2023-04-19 · CVSS 6.1
  Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse on SiteManager, if the generated file is leaked.
• CVE-2022-38124 2022-12-13 · CVSS 5.7
  Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.
• CVE-2022-2752 2022-12-09 · CVSS 5.5
  A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue
• CVE-2022-38123 2022-12-06 · CVSS 8.7
  Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server administrator to inject code into the GateManager in
• CVE-2022-25786 2022-05-04 · CVSS 4.9
  Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information. This issue affects: Gat
• CVE-2022-25787 2022-05-04 · CVSS 7.5
  Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This
• CVE-2022-25785 2022-05-04 · CVSS 6.6
  Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution. This issue affects: Secomea SiteManag
• CVE-2022-25784 2022-05-04 · CVSS 9.1
  Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versio
• CVE-2022-25783 2022-05-04 · CVSS 4.3
  Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Sec
• CVE-2022-25782 2022-05-04 · CVSS 5.4
  Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. T
• CVE-2022-25781 2022-05-04 · CVSS 4.2
  Cross-site Scripting (XSS) vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session.
• CVE-2022-25780 2022-05-04 · CVSS 4.3
  Information Exposure vulnerability in web UI of Secomea GateManager allows logged in user to query devices outside own scope.
• CVE-2022-25779 2022-05-04 · CVSS 4.3
  Logging of Excessive Data vulnerability in audit log of Secomea GateManager allows logged in user to write text entries in audit log. This issue affects: Secome
• CVE-2022-25778 2022-05-04 · CVSS 4.2
  Cross-Site Request Forgery (CSRF) vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session.
• CVE-2021-32010 2022-05-04 · CVSS 5.6
  Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue