Vulnerabilities

TI-2024-16413 CVE-2024-24903 · GHSA-jgh6-gfm4-cj58

Weak password recovery in Dell Secure Connect Gateway Policy Manager

LOW 37

Dell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, contain a weak password recovery mechanism for forgotten passwords.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00415 Published 2024-03-01 No fix listed CWE-640

TI-2024-16414 CVE-2024-24904 · GHSA-rq9q-54hg-qm26

LOW 34

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability.

CVSS 3.1HIGH 7.6 Adjacent network High privileges User interaction EPSS 0.00431 Published 2024-03-01 Fixed in 5.22.00.16 CWE-79

TI-2024-16415 CVE-2024-24905 · GHSA-724c-qwc4-ggg2

LOW 36

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability.

CVSS 3.1HIGH 7.6 Adjacent network High privileges User interaction EPSS 0.00431 Published 2024-03-01 Fixed in 5.22.00.16 CWE-79

TI-2024-16417 CVE-2024-24907 · GHSA-62cw-wm98-px97

LOW 36

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in the Filters page.

CVSS 3.1HIGH 7.6 Adjacent network High privileges User interaction EPSS 0.00422 Published 2024-03-01 Fixed in 5.22.00.16 CWE-79

TI-2024-16416 CVE-2024-24906 · GHSA-fwqf-m675-qmfg

LOW 34

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in Policy page.

CVSS 3.1HIGH 7.6 Adjacent network High privileges User interaction EPSS 0.00422 Published 2024-03-01 Fixed in 5.22.00.16 CWE-79

TI-2024-16410 CVE-2024-24900 · GHSA-fhqm-mfqg-w432

LOW 33

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain an improper authorization vulnerability.

CVSS 3.1HIGH 7.3 Adjacent network Low privileges No interaction EPSS 0.0022 Published 2024-03-01 Fixed in 5.22.00.16 CWE-285