VulnerabilityReporting@secomea.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS VulnerabilityReporting@secomea.com
03
assessed vulnerabilities (45)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-1759US | — | — | ||
Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation.
This issue affects GateManager: 11.5;0, 11.4.62551507… | ||||
| CVE-2026-1758US | — | — | ||
Session fixation vulnerability in Secomea GateManager (webserver module) allows Session Fixation.
This issue affects GateManager: 11.5;0, 11.4.625515072:0.
Fixed in Version 11.… | ||||
| CVE-2025-14716US | — | — | ||
Improper Authentication vulnerability in Secomea GateManager (webserver modules) allows Authentication Bypass.This issue affects GateManager: 11.4;0. | ||||
| CVE-2021-32007US | — | — | ||
This issue affects:
Secomea GateManager
Version 9.5 and all prior versions.
Protection Mechanism Failure vulnerability in web server of Secomea GateManager to potentially leak info… | ||||
| CVE-2024-1969US | — | — | ||
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Secomea GateManager (webserver modules) allows crash of GateManager.This issue affects GateM… | ||||
| CVE-2024-1579US | — | — | ||
Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Secomea GateManager (Webserver modules) allows Session Hijacking.This issue affects GateManager:… | ||||
| CVE-2023-3675US | — | — | ||
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Secomea GateManager (Web GUI) allows Reading Data from System Resources.This issue a… | ||||
| CVE-2023-2912US | high7.5 | — | ||
Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction. | ||||
| CVE-2023-0317US | medium4.9 | — | ||
Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information. | ||||
| CVE-2022-4308US | high8.8 | — | ||
Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse on SiteManager, if the generated file is leaked. | ||||
| CVE-2022-38125US | medium5.5 | — | ||
Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client. | ||||
| CVE-2022-38124US | medium6.5 | — | ||
Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner. | ||||
| CVE-2022-2752US | high7.8 | — | ||
A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions.
This issue affects:
Secomea G… | ||||
| CVE-2022-38123US | high7.2 | — | ||
Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server administrator to inject code into the GateManager interface.
This issue… | ||||
| CVE-2022-25786US | medium4.9 | — | ||
Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information. This issue affects: GateManager all version… | ||||
| CVE-2022-25787US | medium6.7 | — | ||
Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Seco… | ||||
| CVE-2022-25785US | high7.2 | — | ||
Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution. This issue affects: Secomea SiteManager all versions prio… | ||||
| CVE-2022-25784US | medium4.8 | — | ||
Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7. | ||||
| CVE-2022-25783US | medium4.3 | — | ||
Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Secomea GateManager ver… | ||||
| CVE-2022-25782US | medium5.4 | — | ||
Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: S… | ||||