← Back

Secomea

secomea

42 CVEs • 38 products

Products (38)

Click to collapse
Toggle
Gatemanager 8250 Firmware
gatemanager_8250_firmware
20 CVEs
Gatemanager 4250 Firmware
gatemanager_4250_firmware
14 CVEs
Gatemanager 4260 Firmware
gatemanager_4260_firmware
14 CVEs
Gatemanager 9250 Firmware
gatemanager_9250_firmware
14 CVEs
Gatemanager
gatemanager
8 CVEs
Sitemanager 1129 Firmware
sitemanager_1129_firmware
7 CVEs
Sitemanager 1139 Firmware
sitemanager_1139_firmware
7 CVEs
Sitemanager 1149 Firmware
sitemanager_1149_firmware
7 CVEs
Sitemanager 3329 Firmware
sitemanager_3329_firmware
7 CVEs
Sitemanager 3339 Firmware
sitemanager_3339_firmware
7 CVEs
Sitemanager 3349 Firmware
sitemanager_3349_firmware
7 CVEs
Sitemanager 3529 Firmware
sitemanager_3529_firmware
7 CVEs
Sitemanager 3539 Firmware
sitemanager_3539_firmware
7 CVEs
Sitemanager 3549 Firmware
sitemanager_3549_firmware
7 CVEs
Sitemanager Firmware
sitemanager_firmware
3 CVEs
Gatemanager Firmware
gatemanager_firmware
3 CVEs
Sitemanager Embedded
sitemanager_embedded
2 CVEs
Sitemanager 1529 Firmware
sitemanager_1529_firmware
2 CVEs
Sitemanager 1539 Firmware
sitemanager_1539_firmware
2 CVEs
Sitemanager 1549 Firmware
sitemanager_1549_firmware
2 CVEs
Linkmanager
linkmanager
1 CVE
Gatemanager 8250
gatemanager_8250
0 CVEs
Gatemanager 4250
gatemanager_4250
0 CVEs
Gatemanager 4260
gatemanager_4260
0 CVEs
Gatemanager 9250
gatemanager_9250
0 CVEs
Sitemanager 1129
sitemanager_1129
0 CVEs
Sitemanager 1139
sitemanager_1139
0 CVEs
Sitemanager 1149
sitemanager_1149
0 CVEs
Sitemanager 3329
sitemanager_3329
0 CVEs
Sitemanager 3339
sitemanager_3339
0 CVEs
Sitemanager 3349
sitemanager_3349
0 CVEs
Sitemanager 3529
sitemanager_3529
0 CVEs
Sitemanager 3539
sitemanager_3539
0 CVEs
Sitemanager 3549
sitemanager_3549
0 CVEs
Sitemanager
sitemanager
0 CVEs
Sitemanager 1529
sitemanager_1529
0 CVEs
Sitemanager 1539
sitemanager_1539
0 CVEs
Sitemanager 1549
sitemanager_1549
0 CVEs

CVEs (42)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-32005
1Secomea
9Sitemanager 1129 Firmware
Sitemanager 1139 FirmwareSitemanager 1149 Firmware+6 more
Jun 17, 2026
Mar 10, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior ver...Show more
Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions.Show less
CVE-2021-32008
1Secomea
1Gatemanager
Jun 17, 2026
Mar 4, 2022
N/A· v4
8.7 HIGH· v3
8.5 HIGH· v2
This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Improper Limitation of a Pathname to restricted directory, allows logged in GateManager admin to delete system Files or Directories.
CVE-2021-32004
1Secomea
1Gatemanager 8250 Firmware
Jun 17, 2026
Nov 22, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoning.
CVE-2021-32003
1Secomea
1Sitemanager Firmware
Jun 17, 2026
Aug 5, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture credentials if the service is used after provisioning. This issue affects: Secomea SiteManager All v...Show more
Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture credentials if the service is used after provisioning. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware.Show less
CVE-2021-32002
1Secomea
1Sitemanager Firmware
Jun 17, 2026
Aug 5, 2021
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to gather network information and configuration of the SiteManager. This issue affects: Secomea SiteMa...Show more
Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to gather network information and configuration of the SiteManager. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware.Show less
CVE-2020-29030
1Secomea
1Gatemanager Firmware
Jun 17, 2026
Mar 5, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Cross-Site Request Forgery (CSRF) vulnerability in web GUI of Secomea GateManager allows an attacker to execute malicious code. This issue affects: Secomea GateManager All versions prior to 9.4.
CVE-2020-29029
1Secomea
1Gatemanager Firmware
Jun 17, 2026
Mar 5, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Improper Input Validation, Cross-site Scripting (XSS) vulnerability in Web GUI of Secomea GateManager allows an attacker to execute arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to...Show more
Improper Input Validation, Cross-site Scripting (XSS) vulnerability in Web GUI of Secomea GateManager allows an attacker to execute arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4.Show less
CVE-2020-29028
1Secomea
1Gatemanager Firmware
Jun 17, 2026
Mar 5, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site Scripting (XSS) vulnerability in web GUI of Secomea GateManager allows an attacker to inject arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4.
CVE-2020-29020
1Secomea
1Sitemanager Firmware
Jun 17, 2026
Mar 5, 2021
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All vers...Show more
Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.620527004 on Hardware.Show less
CVE-2020-29032
1Secomea
1Gatemanager 8250 Firmware
Jun 17, 2026
Mar 5, 2021
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateManager all versions prio...Show more
Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateManager all versions prior to 9.4.621054022Show less
CVE-2020-29027
1Secomea
9Sitemanager 1129 Firmware
Sitemanager 1139 FirmwareSitemanager 1149 Firmware+6 more
Jun 17, 2026
Feb 16, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site Scripting (XSS) vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager all versions prior to 9.3.
CVE-2020-29025
1Secomea
1Sitemanager Embedded
Jun 17, 2026
Feb 16, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
A vulnerability in SiteManager-Embedded (SM-E) Web server which may allow attacker to construct a URL that if visited by another application user, will cause JavaScript code supplied by the attacker to execute within the...Show more
A vulnerability in SiteManager-Embedded (SM-E) Web server which may allow attacker to construct a URL that if visited by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application. This issue affects all versions and variants of SM-E prior to version 9.3Show less
CVE-2020-29024
1Secomea
4Gatemanager 4250 Firmware
Gatemanager 4260 FirmwareGatemanager 8250 Firmware+1 more
Jun 17, 2026
Feb 16, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in (GTA) GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManage...Show more
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in (GTA) GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManager all versions prior to 9.3.Show less
CVE-2020-29023
1Secomea
4Gatemanager 4250 Firmware
Gatemanager 4260 FirmwareGatemanager 8250 Firmware+1 more
Jun 17, 2026
Feb 16, 2021
N/A· v4
3.5 LOW· v3
4.9 MEDIUM· v2
Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in...Show more
Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program (like Excel). This issue affects: Secomea GateManager all versions prior to 9.3.Show less
CVE-2020-29022
1Secomea
4Gatemanager 4250 Firmware
Gatemanager 4260 FirmwareGatemanager 8250 Firmware+1 more
Jun 17, 2026
Feb 16, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3
CVE-2020-29031
1Secomea
4Gatemanager 4250 Firmware
Gatemanager 4260 FirmwareGatemanager 8250 Firmware+1 more
Jun 17, 2026
Feb 15, 2021
N/A· v4
8.1 HIGH· v3
5.5 MEDIUM· v2
An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any user in its domain or any sub-domain, via escalation of privil...Show more
An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any user in its domain or any sub-domain, via escalation of privileges. This issue affects all GateManager versions prior to 9.2cShow less
CVE-2020-29026
1Secomea
4Gatemanager 4250 Firmware
Gatemanager 4260 FirmwareGatemanager 8250 Firmware+1 more
Jun 17, 2026
Feb 15, 2021
N/A· v4
6.5 MEDIUM· v3
5.5 MEDIUM· v2
A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system....Show more
A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system. This issue affects: GateManager all versions prior to 9.2c.Show less
CVE-2020-29021
1Secomea
4Gatemanager 4250 Firmware
Gatemanager 4260 FirmwareGatemanager 8250 Firmware+1 more
Jun 17, 2026
Feb 8, 2021
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
A vulnerability in web UI input field of GateManager allows authenticated attacker to enter script tags that could cause XSS. This issue affects: GateManager all versions prior to 9.3.
CVE-2020-14512
1Secomea
1Gatemanager 8250 Firmware
Jun 17, 2026
Aug 25, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords.
CVE-2020-14510
1Secomea
1Gatemanager 8250 Firmware
Jun 17, 2026
Aug 25, 2020
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to execute commands as root.