CVE-2022-25781

Cross-site Scripting XSS vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session...

CVE-2022-25782

Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7...

CVE-2022-25782

Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7...

Input validation

Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7...

Cross site scripting

Cross-site Scripting XSS vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session...

Information disclosure

Information Exposure vulnerability in web UI of Secomea GateManager allows logged in user to query devices outside own scope...

CVE-2022-25782 Insufficient privilege checks on object access and updates.

Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7...

CVE-2022-25782

CVE-2022-25782 affects Secomea GateManager Web UI. The vulnerability stems from improper handling of permissions, allowing a logged-in user to access and update privileged information. Impact is described as exposure of privilege information and the ability to modify it for versions prior to 9.7....

CVE-2022-25781

CVE-2022-25781 affects Secomea GateManager Web UI with a cross-site scripting (XSS) vulnerability that can allow an attacker to inject JavaScript/HTML into a logged-in user session, enabling phishing or session manipulation. The connected sources consistently describe XSS in the GateManager web i...

CVE-2022-25781 Reflected XSS issues in GateManager

Cross-site Scripting XSS vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session...

CVE-2022-25780 Information leak via device availability query function

Information Exposure vulnerability in web UI of Secomea GateManager allows logged in user to query devices outside own scope...

CVE-2022-25778 Unload handlers may unintentionally defeat CSRF guards

Cross-Site Request Forgery CSRF vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session...

CVE-2022-25778

The CVE-2022-25778 issue affects Secomea GateManager Web UI and is a Cross-Site Request Forgery (CSRF) vulnerability. The available connected sources describe that versions prior to Secomea GateManager 9.7 are vulnerable to attackers issuing GET requests within a logged-in user session, enabling ...

CVE-2022-25780: Exposure of Sensitive Information to an Unauthorized Actor

Information Exposure vulnerability in web UI of Secomea GateManager allows logged in user to query devices outside own scope...

PT-2022-17507

Name of the Vulnerable Software and Affected Versions Secomea GateManager affected versions not specified Description The issue allows a logged-in user to query devices outside their own scope through the web UI of Secomea GateManager. This is an Information Exposure issue. Recommendations At the...

CVE-2022-25781: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session...

CVE-2022-25782: Improper Handling of Insufficient Privileges

Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7...

CVE-2022-25778: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session...

PT-2022-17504

Name of the Vulnerable Software and Affected Versions Secomea GateManager affected versions not specified Description A Cross-Site Request Forgery CSRF issue in the Web UI of Secomea GateManager allows a phishing attacker to issue a GET request within a logged-in user's session. Recommendations A...

PT-2022-17508

Name of the Vulnerable Software and Affected Versions Secomea GateManager affected versions not specified Description A Cross-site Scripting XSS issue in the Web UI of Secomea GateManager allows a phishing attacker to inject javascript or html into a logged-in user's session. Recommendations At t...