Read the docs

TCMAN

Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

TCMAN records in CISA KEV

No TCMAN vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gim 24 records MEDIUM

Records

24 records

TI-2025-27134 CVE-2025-40664 · GHSA-77h5-q643-73mf

Missing authentication in TCMAN GIM

Priority MEDIUM 49

Missing authentication vulnerability in TCMAN GIM v11.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00574 Published 2025-05-26 No fix listed CWE-306
TI-2025-27096 CVE-2025-40625 · GHSA-mccx-692g-vmcf

Multiple vulnerabilities in TCMAN's GIM

Priority MEDIUM 49

Unrestricted file upload in TCMAN's GIM v11.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00766 Published 2025-05-06 No fix listed CWE-434
TI-2025-27095 CVE-2025-40624 · GHSA-pc7f-fwqv-39wp

Multiple vulnerabilities in TCMAN's GIM

Priority MEDIUM 48

SQL injection in TCMAN's GIM v11.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00449 Published 2025-05-06 No fix listed CWE-89
TI-2025-27094 CVE-2025-40623 · GHSA-gp5v-jq85-98hg

Multiple vulnerabilities in TCMAN's GIM

Priority MEDIUM 48

SQL injection in TCMAN's GIM v11.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00449 Published 2025-05-06 No fix listed CWE-89
TI-2025-27093 CVE-2025-40622 · GHSA-869c-35xf-w582

Multiple vulnerabilities in TCMAN's GIM

Priority MEDIUM 48

SQL injection in TCMAN's GIM v11.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00449 Published 2025-05-06 No fix listed CWE-89
TI-2025-27092 CVE-2025-40621 · GHSA-8w3c-m76m-rh2h

Multiple vulnerabilities in TCMAN's GIM

Priority MEDIUM 48

SQL injection in TCMAN's GIM v11.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00449 Published 2025-05-06 No fix listed CWE-89
TI-2025-27091 CVE-2025-40620 · GHSA-647j-x872-mcw4

Multiple vulnerabilities in TCMAN's GIM

Priority MEDIUM 48

SQL injection in TCMAN's GIM v11.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00449 Published 2025-05-06 No fix listed CWE-89
TI-2025-27366 CVE-2025-41013 · GHSA-424m-x85p-3xw9

SQL injection in TCMAN GIM

Priority MEDIUM 45

SQL injection vulnerability in TCMAN GIM v11 in version 20250304.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00307 Published 2025-12-02 Fixed in 20250304 CWE-89
TI-2021-17773 CVE-2021-40850 · GHSA-4xmj-j6vr-68q9

TCMAN GIM SQL injection vulnerability

Priority MEDIUM 45

TCMAN GIM is vulnerable to a SQL injection vulnerability inside several available webservice methods in /PC/WebService.asmx.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00967 Published 2021-12-17 No fix listed CWE-89
TI-2022-16634 CVE-2022-36276 · GHSA-3gj5-wj52-hff3

SQL injection vulnerability in TCMAN GIM

Priority MEDIUM 44

TCMAN GIM v8.0.1 is vulnerable to a SQL injection via the 'SqlWhere' parameter inside the function 'BuscarESM'.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00775 Published 2023-10-04 No fix listed CWE-89
TI-2025-27365 CVE-2025-41012 · GHSA-r93h-5xgh-5wfh

Missing authorization in TCMAN GIM

Priority MEDIUM 43

Unauthorized access vulnerability in TCMAN GIM v11 version 20250304.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00267 Published 2025-12-02 Fixed in 20250304 CWE-862
TI-2021-17774 CVE-2021-40851 · GHSA-x5f7-m6j9-3793

TCMAN GIM SQL injection vulnerability

Priority LOW 36

TCMAN GIM is vulnerable to a lack of authorization in all available webservice methods listed in /PC/WebService.asmx.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01373 Published 2021-12-17 No fix listed CWE-287
TI-2021-17776 CVE-2021-40853 · GHSA-g4wc-2gqq-5g7v

TCMAN GIM missing authorization vulnerability

Priority LOW 33

TCMAN GIM does not perform an authorization check when trying to access determined resources.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00852 Published 2021-12-17 No fix listed CWE-862
TI-2025-27368 CVE-2025-41015 · GHSA-hr68-wphp-w2x5

User Enumeration vulnerability in TCMAN GIM

Priority LOW 30

User Enumeration Vulnerability in TCMAN GIM v11 version 20250304.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00326 Published 2025-12-02 Fixed in 20250304 CWE-200
TI-2025-27367 CVE-2025-41014 · GHSA-wqx7-h3g4-fh2f

User Enumeration vulnerability in TCMAN GIM

Priority LOW 30

User Enumeration Vulnerability in TCMAN GIM v11 version 20250304.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00326 Published 2025-12-02 Fixed in 20250304 CWE-200
TI-2022-16635 CVE-2022-36277 · GHSA-g2hx-67cj-4mvm

SQL injection vulnerability in TCMAN GIM

Priority LOW 29

The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00334 Published 2023-10-04 No fix listed CWE-79
TI-2021-17775 CVE-2021-40852 · GHSA-cmxr-2mw4-8jjq

TCMAN GIM open redirect vulnerability

Priority LOW 29

TCMAN GIM is affected by an open redirect vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00747 Published 2021-12-17 No fix listed CWE-601
TI-2021-02933 CVE-2021-4046 · GHSA-6rhh-8mrh-6xqv

TCMAN GIM Cross-Site Scripting (XSS)

Priority LOW 25

The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00441 Published 2022-02-11 No fix listed CWE-79
Open these records in search →