Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Secomea SiteManager 9.7 Clear all filters
TI-2022-09357 CVE-2022-25785 · GHSA-3hgg-j739-jpxx

Buffer overrun

Priority LOW 34

Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01007 Published 2022-05-04 Fixed in 9.7 CWE-121
TI-2022-09356 CVE-2022-25784 · GHSA-3hf3-rvvm-859m

User controllable HTML element attribute (potential XSS)

Priority MEDIUM 40

Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00611 Published 2022-05-04 Fixed in 9.7 CWE-79
TI-2021-11990 CVE-2021-32010 · GHSA-7xh5-p97v-cg6q

Clients may connect to a GateManager with TLS 1.0

Priority LOW 35

Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00231 Published 2022-05-04 Fixed in 9.7 CWE-326