Skip to content
OpenAdvisories

Vendor

Secomea

48 known vulnerabilities.

Products

GateManager 37 SiteManager 10 SiteManager Embedded 1 SiteManager Embedded (SM-E) 1 LinkManager 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.5
    CVE-2021-32007

    Missing security header: Referrer-Policy URL

    This issue affects: Secomea GateManager Version 9.5 and all prior versions. Protection Mechanism Failure vulnerability in web server of Secomea GateManager to potentially leak information to remote servers.

    Secomea GateManager
  • Low 2.9
    CVE-2022-38125

    FTP Agent forwards traffic on inactive ports to LinkManager

    Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client.

    Secomea SiteManager
  • Low 3.7
    CVE-2021-32004

    GateManager does not enforce strict hostname matching for WEB server

    This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoning.

    Secomea GateManager
  • Low 3.5
    CVE-2020-29023

    CSV Formula Injection possible due to improper fields escaping in GateManager

    Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program (like Excel). Thi…

    Secomea GateManager
  • Low 3.5
    CVE-2020-29021

    Scripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS)

    A vulnerability in web UI input field of GateManager allows authenticated attacker to enter script tags that could cause XSS. This issue affects: GateManager all versions prior to 9.3.

    Secomea GateManager