Skip to content
OpenAdvisories

Product · Secomea

SiteManager

10 known vulnerabilities.

6 results · Clear filters · Feed

  • Medium 5.7

    Unwanted debug tool

    Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.

  • Medium 6.6

    Buffer overrun

    Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution. This issue affects: Secomea SiteManager all versions prior to 9.7.

  • Medium 5.6

    Clients may connect to a GateManager with TLS 1.0

    Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue affects: Secomea SiteManager All versions prior to 9.7. Secomea LinkManager versions prior to 9.7. …

  • Medium 6.5

    SiteManager Log View XSS Issue

    Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions.

  • Medium 4.3

    SiteManager troubleshooter allows access without authentication from local network

    Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to gather network information and configuration of the SiteManager. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hard…

  • Medium 5.4

    Reflected Cross Site Scripting

    Cross-site Scripting (XSS) vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager all versions prior to 9.3.