CVE-2022-25784

CVE-2022-25784: XSS in the Web GUI of Secomea SiteManager that lets a logged-in user inject scripts. Affected: SiteManager all versions prior to 9.7. Root cause described as a cross-site scripting vulnerability in the Web GUI; exploitation requires a logged-in user. The connected documents confir...

CVE-2021-32010

This CVE describes an Inadequate Encryption Strength issue in the TLS stack of Secomea SiteManager, LinkManager, and GateManager affecting versions prior to 9.7. The root cause is weaknesses in TLS encryption that could enable man-in-the-middle attacks over the network. Affected products expose n...

CVE-2021-32010 Clients may connect to a GateManager with TLS 1.0

Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue affects: Secomea SiteManager All versions prior to 9.7. Secomea LinkManager versions prior to 9.7. Secomea GateManager versions prior to...

Secomea 多款产品加密问题漏洞

Secomea GateManager and Secomea SiteManager are both products of Secomea, Denmark.GateManager is a remote access server product.Secomea SiteManager is a software application. Secomea SiteManager is a software application that provides a remote maintenance function for industrial equipment. A...

Secomea SiteManager 缓冲区错误漏洞

Secomea SiteManager is a Danish Secomea application that provides a remote maintenance function for industrial equipment. Secomea SiteManager is vulnerable to a stack buffer overflow vulnerability that can be exploited by attackers to cause arbitrary code execution...

Secomea SiteManager 跨站脚本漏洞

Secomea SiteManager is an application from the Danish company Secomea. All versions of Secomea SiteManager prior to 9.7 have security vulnerabilities that could be exploited to allow injection of scripts by logged-in users...

CVE-2021-32005

Cross-site Scripting XSS vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions...

CVE-2021-32005

Cross-site Scripting XSS vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions...

CVE-2021-32006

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files...

CVE-2021-32006

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files...

Design/Logic Flaw

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files...

Cross site scripting

Cross-site Scripting XSS vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions...

Secomea GateManager 安全漏洞

Secomea GateManager is a remote access server product from Secomea, Denmark. A security vulnerability exists in Secomea GateManager Version 9.6.621421014 and earlier versions that allows allows allows LinkManager users to access SiteManager backup files...

CVE-2021-32005

CVE-2021-32005 is an XSS in Secomea SiteManager log view that lets a logged-in user store JavaScript for later execution. Affected: SiteManager version 9.6.621421014 and all prior versions. CVSS/metrics indicate a Network-suitable vulnerability with MEDIUM impact (I/L, C/L) and user interaction r...

CVE-2021-32005 SiteManager Log View XSS Issue

Cross-site Scripting XSS vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions...

CVE-2021-32006 GateManager information leak for LinkManager Users

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files...

CVE-2021-32006

The CVE-2021-32006 entry affects Secomea GateManager (Version 9.6.621421014 and all prior versions). The vulnerability is in the LinkManager web portal, where a logged-in LinkManager user can access SiteManager backup files, exposing potentially sensitive backup data. Publicly available documents...

CVE-2021-32003

Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture credentials if the service is used after provisioning. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware...

CVE-2021-32003

Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture credentials if the service is used after provisioning. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware...

CVE-2021-32002

Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to gather network information and configuration of the SiteManager. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware...