Gatemanager

gatemanager

Vendor: Secomea • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-0317 1Secomea 1Gatemanager Jun 17, 2026 Apr 19, 2023 N/A· v4 4.9 MEDIUM· v3 N/A· v2 Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information.
CVE-2022-4308 1Secomea 1Gatemanager Jun 17, 2026 Apr 19, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse on SiteManager, if the generated file is leaked.
CVE-2022-2752 1Secomea 1Gatemanager Jun 17, 2026 Dec 9, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue affects: Secomea GateManager versions from 9.4 through 9.7...Show more A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue affects: Secomea GateManager versions from 9.4 through 9.7. Show less
CVE-2022-38123 1Secomea 1Gatemanager Jun 17, 2026 Dec 6, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server administrator to inject code into the GateManager interface. This issue affects: Secomea GateManager versions...Show more Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server administrator to inject code into the GateManager interface. This issue affects: Secomea GateManager versions prior to 10.0. Show less
CVE-2022-25786 1Secomea 1Gatemanager Jun 17, 2026 May 4, 2022 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information. This issue affects: GateManager all versions prior to 9.7.
CVE-2021-32009 1Secomea 1Gatemanager Jun 17, 2026 Mar 11, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site Scripting (XSS) vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all pri...Show more Cross-site Scripting (XSS) vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions.Show less
CVE-2021-32006 1Secomea 1Gatemanager Jun 17, 2026 Mar 10, 2022 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored Si...Show more This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files.Show less
CVE-2021-32008 1Secomea 1Gatemanager Jun 17, 2026 Mar 4, 2022 N/A· v4 8.7 HIGH· v3 8.5 HIGH· v2 This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Improper Limitation of a Pathname to restricted directory, allows logged in GateManager admin to delete system Files or Directories.