Secomea GateManager

• CVE-2026-1759 Medium 6.5 Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation. This issue affects GateManager: 11.5;0, 11.4.625515072:0. Fixed in Ver 0.3%
• CVE-2026-1758 High 8.3 Session Fixation 0.4%
• CVE-2025-14716 Medium 6.5 Unauthorized access to information 0.4%
• CVE-2021-32007 Low 3.5 Missing security header: Referrer-Policy URL 0.3%
• CVE-2024-1969 High 8.2 Heap buffer overflow 0.5%
• CVE-2024-1579 High 8.1 Insufficient seeding of random number generator 0.5%
• CVE-2023-3675 Medium 6.5 Insufficient input validation when downloading certain file types. 0.5%
• CVE-2023-0317 Medium 4.9 GateManager debug interface is included in non-debug builds 0.5%
• CVE-2022-4308 Medium 6.1 Clear-text passwords in configuration files 0.2%
• CVE-2022-2752 Medium 5.5 Potential vulnerabilities in GM login process 0.2%
• CVE-2022-38123 High 8.7 Insufficient validation of plugin files 0.8%
• CVE-2022-25786 Medium 4.9 GateManager debug interface is included in production builds 0.7%
• CVE-2022-25787 High 7.5 GTA URLs issued by LMM WEB API may leak information 0.2%
• CVE-2022-25783 Medium 4.3 Hacking attempts from logged-in users are not properly logged by GM 0.6%
• CVE-2022-25782 Medium 5.4 Insufficient privilege checks on object access and updates. 0.5%
• CVE-2022-25781 Medium 4.2 Reflected XSS issues in GateManager 0.5%
• CVE-2022-25780 Medium 4.3 Information leak via device availability query function 0.6%
• CVE-2022-25779 Medium 4.3 Insufficient scope checks allows adding unrelated audit log entries 0.6%
• CVE-2022-25778 Medium 4.2 Unload handlers may unintentionally defeat CSRF guards 0.3%
• CVE-2021-32010 Medium 5.6 Clients may connect to a GateManager with TLS 1.0 0.2%
• CVE-2021-32009 Medium 5.0 Missing XSS guards on firmware page 0.5%
• CVE-2021-32006 Medium 5.0 GateManager information leak for LinkManager Users 0.6%
• CVE-2021-32008 Critical 9.9 Logged-in Administrator may get unrestricted file system access 1.0%
• CVE-2021-32004 Low 3.7 GateManager does not enforce strict hostname matching for WEB server 0.6%
• CVE-2020-29030 High 8.1 Insufficient CSRF guards 0.5%
• CVE-2020-29028 Medium 6.3 Reflected XSS issues 0.7%
• CVE-2020-29029 High 7.3 XSS issue due to insufficient sanitization of input field 0.8%
• CVE-2020-29032 High 8.4 Add integrity check of GateManager firmware 0.5%
• CVE-2020-29023 Low 3.5 CSV Formula Injection possible due to improper fields escaping in GateManager 0.5%
• CVE-2020-29022 Medium 5.3 Host Header Injection allowing web cache poisoning attacks 0.8%
• CVE-2020-29024 Medium 5.3 Missing HtppOnly and Secure flags 0.5%
• CVE-2020-29031 High 7.1 Insecure Direct Object Reference in GateManager WebUI can cause privilege escalation 0.7%
• CVE-2020-29026 Critical 9.0 A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the 1.5%
• CVE-2020-29021 Low 3.5 Scripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS) 0.7%
• CVE-2020-14512 High 8.1 USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916 0.8%
• CVE-2020-14510 Critical 9.8 OFF-BY-ONE ERROR CWE-193 2.5%
• CVE-2020-14508 High 8.1 OFF-BY-ONE ERROR CWE-193 2.0%