Gallagher Command Centre

Name: Gallagher Command Centre
Brand: Gallagher

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical11high13medium0low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-16103US	high8.8	2.29% (83rd)	—	8.30.1236(MR1)	2020-12-14	4 versions
CVE-2020-16098US	critical9.8OT elevated	1.09% (65th)	—	8.00.1228(MR6)	2020-09-15	4 versions
CVE-2020-16101US	high7.5	1.04% (64th)	—	8.00.1228 (MR6)	2020-09-15	4 versions
CVE-2020-16100US	high7.5	1.04% (64th)	—	8.00.1228 (MR6)	2020-09-15	4 versions
CVE-2020-16102US	high8.2OT elevated	1.04% (64th)	—	8.30.1299(MR2)	2020-12-14	5 versions
CVE-2020-16104US	high7.2	0.91% (60th)	—	8.30.1236(MR1)	2020-12-14	5 versions
CVE-2021-23205US	high8.1	0.87% (59th)	—	8.40.1888 (MR3)	2021-06-11	4 versions
CVE-2021-23140US	high8.8	0.85% (58th)	—	8.20.1259 (MR5)	2021-06-11	4 versions
CVE-2020-16096US	high7.7	0.80% (56th)	—	7.80.960(MR2)	2020-09-15	5 versions
CVE-2020-16099US	medium4.3	0.80% (56th)	—	8.20.1093(MR2)	2020-09-15	8.20 → 8.20.1093(MR2)
CVE-2021-23193US	medium6.5	0.70% (53rd)	—	8.30.1454 (MR4)	2021-11-18	5 versions
CVE-2021-23204US	medium6.5OT elevated	0.70% (53rd)	—	8.40.1888 (MR3)	2021-06-11	2 versions
CVE-2023-23570US	high8.1	0.67% (52nd)	—	no fix	2023-12-18	2 versions
CVE-2021-23230US	medium4.3	0.66% (51st)	—	8.10.1284 (MR7)	2021-06-11	5 versions
CVE-2023-22363US	high7.5	0.60% (49th)	—	1192	2023-07-25	vEL8.80 → 1192
CVE-2021-23136US	medium6.5	0.58% (48th)	—	8.30.1359 (MR3)	2021-06-11	4 versions
CVE-2021-23167US	medium6.8	0.40% (34th)	—	8.30.1454 (MR4)	2021-11-18	4 versions
CVE-2023-22428US	medium6.5	0.36% (30th)	—	2831	2023-07-24	5 versions
CVE-2023-23568US	medium5.4	0.31% (24th)	—	2347	2023-07-25	6 versions
CVE-2023-25074US	medium5.4	0.31% (24th)	—	1318	2023-07-25	6 versions
CVE-2020-16097US	medium4.6	0.31% (23rd)	—	vGR8.00.165	2020-09-15	5 versions
CVE-2021-23197US	high7.8	0.27% (19th)	—	8.50.2048 (MR3)	2021-11-18	8.50 → 8.50.2048 (MR3)
CVE-2022-26348US	medium5.5	0.27% (19th)	—	8.30.1470	2022-07-06	5 versions
CVE-2021-23182US	medium4.4OT elevated	0.17% (6th)	—	8.40.1888 (MR3)	2021-06-11	2 versions
CVE-2024-23194US	—	0.15% (4th)	—	vEL9.10.1268	2024-07-11	9.10 → vEL9.10.1268
CVE-2021-23211US	medium4.4OT elevated	0.11% (1st)	—	8.40.1888 (MR3)	2021-06-11	8.40 → 8.40.1888 (MR3)

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-285Improper Authorization6 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-312Cleartext Storage of Sensitive Information2 CVEs
CWE-316Cleartext Storage of Sensitive Information in Memory2 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan