Lucene search
+L

1015 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/01 12:00 a.m.•8 views

CVE-2024-24906: Improper Neutralization of Input During Web Page Generation

Dell Secure Connect Gateway SCG Policy Manager, all versions, contains a Stored Cross-Site Scripting Vulnerability in Policy page. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted...

7.6CVSS5.9AI score0.00422EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/01 12:00 a.m.•11 views

CVE-2024-24907: Improper Neutralization of Input During Web Page Generation

Dell Secure Connect Gateway SCG Policy Manager, all versions, contains a Stored Cross-Site Scripting Vulnerability in the Filters page. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a...

7.6CVSS5.9AI score0.00422EPSS
SaveExploits0References2
NVD
NVD
•added 2023/09/21 6:15 a.m.•37 views

CVE-2023-39252

Dell SCG Policy Manager 5.16.00.14 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by performing MitM attacks and let attackers obtain sensitive information...

5.9CVSS5.8AI score0.00424EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/21 6:15 a.m.•23 views

Design/Logic Flaw

Dell SCG Policy Manager 5.16.00.14 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by performing MitM attacks and let attackers obtain sensitive information...

2.6CVSS5.9AI score0.00424EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/09/21 5:32 a.m.•71 views

CVE-2023-39252

Dell EMC SCG Policy Manager 5.16.00.14 is affected by a broken cryptographic algorithm vulnerability that enables remote unauthenticated MitM attacks to obtain sensitive information. Root cause: cryptographic algorithm flaw in the policy manager; CVSS metrics indicate high confidentiality impact ...

5.9CVSS5.8AI score0.00424EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/09/21 5:32 a.m.•45 views

CVE-2023-39252

Dell SCG Policy Manager 5.16.00.14 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by performing MitM attacks and let attackers obtain sensitive information...

5.9CVSS6.1AI score0.00424EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/09/21 5:32 a.m.•16 views

CVE-2023-39252

Dell SCG Policy Manager 5.16.00.14 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by performing MitM attacks and let attackers obtain sensitive information...

5.9CVSS7AI score0.00424EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/21 12:00 a.m.•5 views

CVE-2023-39252: Use of a Broken or Risky Cryptographic Algorithm

Dell SCG Policy Manager 5.16.00.14 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by performing MitM attacks and let attackers obtain sensitive information...

5.9CVSS6.4AI score0.00424EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/09/21 12:00 a.m.•16 views

Dell EMC SCG Policy Manager Encryption Issue Vulnerability

Dell EMC SCG Policy Manager is a Secure Connectivity Gateway Policy Manager from Dell, Inc. A cryptographic issue vulnerability exists in Dell EMC SCG Policy Manager version 5.16.00.14. The vulnerability stems from a cryptographic algorithmic flaw in the system, which could be exploited by a remo...

5.9CVSS6.7AI score0.00424EPSS
SaveExploits0References2
NVD
NVD
•added 2023/06/01 4:15 p.m.•38 views

CVE-2023-28043

Dell SCG 5.14 contains an information disclosure vulnerability during the SRS to SCG upgrade path. A remote low privileged malicious user could potentially exploit this vulnerability to retrieve the plain text...

6.5CVSS6.2AI score0.00338EPSS
SaveExploits0References1
Prion
Prion
•added 2023/06/01 4:15 p.m.•36 views

Information disclosure

Dell SCG 5.14 contains an information disclosure vulnerability during the SRS to SCG upgrade path. A remote low privileged malicious user could potentially exploit this vulnerability to retrieve the plain text...

4CVSS6.2AI score0.00338EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/06/01 3:58 p.m.•49 views

CVE-2023-28043

Dell SCG 5.14 contains an information disclosure vulnerability during the SRS to SCG upgrade path. A remote low privileged malicious user could potentially exploit this vulnerability to retrieve the plain text...

6.5CVSS6.4AI score0.00338EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/06/01 3:58 p.m.•15 views

CVE-2023-28043

Dell SCG 5.14 contains an information disclosure vulnerability during the SRS to SCG upgrade path. A remote low privileged malicious user could potentially exploit this vulnerability to retrieve the plain text...

6.5CVSS6.7AI score0.00338EPSS
SaveExploits0References1
CVE
CVE
•added 2023/06/01 3:58 p.m.•60 views

CVE-2023-28043

Dell SCG 5.14 is affected by an information-disclosure vulnerability in the upgrade path from SRS to SCG. A remote, low-privileged attacker could potentially retrieve plaintext information. Affected component: Dell SCG/Policy Manager upgrade flow; root cause involves insufficient protection durin...

6.5CVSS6.2AI score0.00338EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/01 12:00 a.m.•10 views

CVE-2023-28043: Use of a Broken or Risky Cryptographic Algorithm

Dell SCG 5.14 contains an information disclosure vulnerability during the SRS to SCG upgrade path. A remote low privileged malicious user could potentially exploit this vulnerability to retrieve the plain text...

6.5CVSS6AI score0.00338EPSS
SaveExploits0References2
CVE
CVE
•added 2023/02/17 6:12 a.m.•75 views

CVE-2023-23695

Dell Secure Connect Gateway (SCG) v5.14.00.12 is affected by a broken cryptographic algorithm vulnerability that could enable remote, unauthenticated MitM attacks to extract sensitive data. This is documented across multiple sources (NVD, PRION, PRION-like entries, PT-2023-6682) and centers on SC...

5.9CVSS5.8AI score0.00424EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2023/01/30 12:00 a.m.•55 views

Dell EMC SCG Policy Manager Privilege Elevation Vulnerability

Dell EMC SCG Policy Manager is a secure connectivity gateway policy manager from Dell, U.S. A security vulnerability exists in Dell EMC SCG Policy Manager that could be exploited by remote attackers to submit a special request to hard-code a login to the system to gain administrator privileges...

8.4CVSS4.6AI score0.00197EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/01/30 12:00 a.m.•59 views

Dell EMC SCG Policy Manager Trust Management Issue Vulnerability

Dell EMC SCG Policy Manager is a secure connectivity gateway policy manager from Dell, U.S. A vulnerability exists in Dell EMC SCG Policy Manager that uses hard-coded encryption keys, which can be exploited by remote attackers to submit special requests that can gain LDAP user privileges...

9.8CVSS3.8AI score0.00419EPSS
SaveExploits0References1
NVD
NVD
•added 2023/01/18 7:15 a.m.•35 views

CVE-2022-34462

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contains a Hard-coded Password Vulnerability. An attacker, with the knowledge of the hard-coded credentials, could potentially exploit this vulnerability to login to the system to gain admin privileges...

8.4CVSS8.5AI score0.00197EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/01/18 7:15 a.m.•23 views

CVE-2022-34462

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contains a Hard-coded Password Vulnerability. An attacker, with the knowledge of the hard-coded credentials, could potentially exploit this vulnerability to login to the system to gain admin privileges...

7.8CVSS5.8AI score0.00197EPSS
SaveExploits0References1
Rows per page
Query Builder