SSecomea

Products

Exploited and recent CVEs

• CVE-2026-1759 Medium 6.5 Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation. This issue affects GateManager: 11.5;0, 11.4.625515072:0. Fixed in Ver 0.3%
• CVE-2026-1758 High 8.3 Session Fixation 0.4%
• CVE-2025-14716 Medium 6.5 Unauthorized access to information 0.4%
• CVE-2021-32007 Low 3.5 Missing security header: Referrer-Policy URL 0.3%
• CVE-2024-1969 High 8.2 Heap buffer overflow 0.5%
• CVE-2024-1579 High 8.1 Insufficient seeding of random number generator 0.5%
• CVE-2023-3675 Medium 6.5 Insufficient input validation when downloading certain file types. 0.5%
• CVE-2023-2912 Medium 5.9 SiteManager Embedded service disruption 0.5%
• CVE-2022-38125 Low 2.9 FTP Agent forwards traffic on inactive ports to LinkManager 0.2%
• CVE-2023-0317 Medium 4.9 GateManager debug interface is included in non-debug builds 0.5%
• CVE-2022-4308 Medium 6.1 Clear-text passwords in configuration files 0.2%
• CVE-2022-38124 Medium 5.7 Unwanted debug tool 0.5%
• CVE-2022-2752 Medium 5.5 Potential vulnerabilities in GM login process 0.2%
• CVE-2022-38123 High 8.7 Insufficient validation of plugin files 0.8%
• CVE-2022-25786 Medium 4.9 GateManager debug interface is included in production builds 0.7%
• CVE-2022-25787 High 7.5 GTA URLs issued by LMM WEB API may leak information 0.2%
• CVE-2022-25785 Medium 6.6 Buffer overrun 1.0%
• CVE-2022-25784 Critical 9.1 User controllable HTML element attribute (potential XSS) 0.6%
• CVE-2022-25783 Medium 4.3 Hacking attempts from logged-in users are not properly logged by GM 0.6%
• CVE-2022-25782 Medium 5.4 Insufficient privilege checks on object access and updates. 0.5%
• CVE-2022-25781 Medium 4.2 Reflected XSS issues in GateManager 0.5%
• CVE-2022-25780 Medium 4.3 Information leak via device availability query function 0.6%
• CVE-2022-25779 Medium 4.3 Insufficient scope checks allows adding unrelated audit log entries 0.6%
• CVE-2022-25778 Medium 4.2 Unload handlers may unintentionally defeat CSRF guards 0.3%
• CVE-2021-32010 Medium 5.6 Clients may connect to a GateManager with TLS 1.0 0.2%
• CVE-2021-32010 Medium 5.6 Clients may connect to a GateManager with TLS 1.0 0.2%
• CVE-2021-32010 Medium 5.6 Clients may connect to a GateManager with TLS 1.0 0.2%
• CVE-2021-32009 Medium 5.0 Missing XSS guards on firmware page 0.5%
• CVE-2021-32005 Medium 6.5 SiteManager Log View XSS Issue 0.6%
• CVE-2021-32006 Medium 5.0 GateManager information leak for LinkManager Users 0.6%