Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Secomea GateManager 9.4 Clear all filters
TI-2020-17536 CVE-2020-29030 · GHSA-gp5g-75v2-9x72

Insufficient CSRF guards

Priority LOW 39

Cross-Site Request Forgery (CSRF) vulnerability in web GUI of Secomea GateManager allows an attacker to execute malicious code.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00519 Published 2021-03-05 Fixed in 9.4 CWE-352
TI-2020-17534 CVE-2020-29028 · GHSA-xwmw-rf59-w488

Reflected XSS issues

Priority LOW 29

Cross-site Scripting (XSS) vulnerability in web GUI of Secomea GateManager allows an attacker to inject arbitrary javascript code.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00674 Published 2021-03-05 Fixed in 9.4 CWE-79
TI-2020-17535 CVE-2020-29029 · GHSA-3938-vx68-327v

XSS issue due to insufficient sanitization of input field

Priority LOW 33

Improper Input Validation, Cross-site Scripting (XSS) vulnerability in Web GUI of Secomea GateManager allows an attacker to execute arbitrary javascript code.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00777 Published 2021-03-05 Fixed in 9.4 CWE-20