Read the docs

Skyhigh Security

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Skyhigh Security records in CISA KEV

No Skyhigh Security vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Secure Web Gateway 3 records MEDIUM

Records

3 records in Secure Web Gateway · all components

TI-2022-02133 CVE-2022-2310 · GHSA-45rr-gg9f-wfcm

Skyhigh SWG Authentication bypass vulnerability

Priority MEDIUM 45

An authentication bypass vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.12, 9.x prior to 9.2.23, 8.x prior to 8.2.28, and controlled release 11.x prior to 11.2.1 allows a remote attacker to bypass authe…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01237 Published 2022-07-27 Fixed in 10.2.12, 9.2.23 +2 CWE-290
TI-2023-04064 CVE-2023-4400 · GHSA-qggp-c2rq-6x65

Cleartext storage of sensitive information in Skyhigh Secure Web Gateway

Priority LOW 29

A password management vulnerability in Skyhigh Secure Web Gateway (SWG) in main releases 11.x prior to 11.2.14, 10.x prior to 10.2.25 and controlled release 12.x prior to 12.2.1, allows some authentication information st…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00356 Published 2023-09-13 Fixed in 11.2.14, 10.2.25 +1 CWE-256
TI-2024-05940 CVE-2024-6398 · GHSA-5f54-j5vv-v7h2

Information disclosure in Skyhigh Secure Web Gateway

Priority LOW 24

An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows information stored in a customizable block page to be disclosed to third-party websites due to Same Origin…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00329 Published 2024-07-15 No fix listed CWE-200
Open these records in search →