Skip to content
OpenAdvisories

Product · Gallagher

Command Centre

26 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 7.1
    CVE-2023-25074

    Competency access levels not enforced in the server

    Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Competencies. This issue affects Command Centre: vEL8.90 prior to vEL8.90.1318 (MR1), vEL8.80 prior to vEL8.80.1192 (MR2), vEL8.70 prior to v…

    Gallagher Command Centre
  • High 7.6
    CVE-2023-22428

    Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage. This …

    Gallagher Command Centre
  • High 8.2
    CVE-2022-26348

    Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. The W…

    Gallagher Command Centre
  • High 8.1
    CVE-2021-23193

    Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated un…

    Gallagher Command Centre
  • High 8.1
    CVE-2021-23167

    Improper certificate validation vulnerability in SMTP Client allows man-in-the-middle attack to retrieve sensitive info…

    Gallagher Command Centre
  • High 8.1
    CVE-2021-23205

    Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configur…

    Gallagher Command Centre
  • High 8.1
    CVE-2021-23204

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gallagher Command Centre Server allows OSDP…

    Gallagher Command Centre
  • High 8.8
    CVE-2020-16103

    Type confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or possibly cause remote…

    Gallagher Command Centre
  • High 7.1
    CVE-2020-16102

    Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to c…

    Gallagher Command Centre
  • High 8.2
    CVE-2020-16104

    SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a remote attacker with 'Edi…

    Gallagher Command Centre
  • High 7.5
    CVE-2020-16101

    It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an ou…

    Gallagher Command Centre
  • High 7.5
    CVE-2020-16100

    It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service's DCOM webso…

    Gallagher Command Centre
  • High 7.3
    CVE-2020-16097

    On controllers running versions of v8.20 prior to vCR8.20.200221b (distributed in v8.20.1093(MR2)), v8.10 prior to vGR8…

    Gallagher Command Centre