Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Skyhigh Security Component: Secure Web Gateway Clear all filters
TI-2024-05940 CVE-2024-6398 · GHSA-5f54-j5vv-v7h2

Information disclosure in Skyhigh Secure Web Gateway

Priority LOW 24

An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows information stored in a customizable block page to be disclosed to third-party websites due to Same Origin…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00329 Published 2024-07-15 No fix listed CWE-200
TI-2023-04064 CVE-2023-4400 · GHSA-qggp-c2rq-6x65

Cleartext storage of sensitive information in Skyhigh Secure Web Gateway

Priority LOW 29

A password management vulnerability in Skyhigh Secure Web Gateway (SWG) in main releases 11.x prior to 11.2.14, 10.x prior to 10.2.25 and controlled release 12.x prior to 12.2.1, allows some authentication information st…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00356 Published 2023-09-13 Fixed in 11.2.14, 10.2.25 +1 CWE-256
TI-2022-02133 CVE-2022-2310 · GHSA-45rr-gg9f-wfcm

Skyhigh SWG Authentication bypass vulnerability

Priority MEDIUM 45

An authentication bypass vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.12, 9.x prior to 9.2.23, 8.x prior to 8.2.28, and controlled release 11.x prior to 11.2.1 allows a remote attacker to bypass authe…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01237 Published 2022-07-27 Fixed in 10.2.12, 9.2.23 +2 CWE-290