Advisories · Technology

Gallagher Command Centre.

Every CVE that names Gallagher Command Centre among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-23194 CVE record

CVSS 3.3 Low

Log injection in Gallagher Command Centre
- Gallagher Command Centre
- Other injection
Not analysed yet 11 Jul 2024
CVE-2023-23570 CVE record

CVSS 5.4 Medium

Gallagher Command Centre: Client-Side enforcement of Server-Side security for the Command Centre server could be…
- Gallagher Command Centre
- CWE-602
Not analysed yet 18 Dec 2023
CVE-2023-23568 CVE record

CVSS 4.3 Medium

Improper authorization in Gallagher Command Centre
- Gallagher Command Centre
- Broken access control
Not analysed yet 25 Jul 2023
CVE-2023-22363 CVE record

CVSS 6.5 Medium

Access Zone stack overflow
- Gallagher Command Centre
- Memory corruption
Not analysed yet 24 Jul 2023
CVE-2023-25074 CVE record

CVSS 7.1 High

Competency access levels not enforced in the server
- Gallagher Command Centre
- Broken access control
Not analysed yet 24 Jul 2023
CVE-2023-22428 CVE record

CVSS 7.6 High

Improper authorization in Gallagher Command Centre
- Gallagher Command Centre
- Broken access control
Not analysed yet 24 Jul 2023
CVE-2022-26348 CVE record

CVSS 8.2 High

SQL injection in Gallagher Command Centre
- Gallagher Command Centre
- SQL injection
Not analysed yet 6 Jul 2022
CVE-2021-23193 CVE record

CVSS 8.1 High

Information disclosure in Gallagher Command Centre
- Gallagher Command Centre
- Information disclosure
Not analysed yet 18 Nov 2021
CVE-2021-23197 CVE record

CVSS 5.2 Medium

Unquoted search path in Gallagher Command Centre
- Gallagher Command Centre
- CWE-428
Not analysed yet 18 Nov 2021
CVE-2021-23167 CVE record

CVSS 8.1 High

Improper certificate validation in Gallagher Command Centre
- Gallagher Command Centre
- Weak cryptography or TLS
Not analysed yet 18 Nov 2021
CVE-2021-23230 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

SQL injection in Gallagher Command Centre
- Gallagher Command Centre
- SQL injection
Not analysed yet 11 Jun 2021
CVE-2021-23211 CVE record

CVSS 6.0 Medium

Gallagher Command Centre: Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command…
- Gallagher Command Centre
- CWE-316
Not analysed yet 11 Jun 2021
CVE-2021-23205 CVE record

CVSS 8.1 High

Improper output encoding in Gallagher Command Centre
- Gallagher Command Centre
- CWE-116
Not analysed yet 11 Jun 2021
CVE-2021-23204 CVE record

CVSS 8.1 High

Information disclosure in Gallagher Command Centre
- Gallagher Command Centre
- Information disclosure
Not analysed yet 11 Jun 2021
CVE-2021-23182 CVE record

CVSS 6.0 Medium

Gallagher Command Centre: Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command…
- Gallagher Command Centre
- CWE-316
Not analysed yet 11 Jun 2021
CVE-2021-23140 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper authorization in Gallagher Command Centre
- Gallagher Command Centre
- Broken access control
Not analysed yet 11 Jun 2021
CVE-2021-23136 CVE record

CVSS 6.5 Medium

Improper authorization in Gallagher Command Centre
- Gallagher Command Centre
- Broken access control
Not analysed yet 11 Jun 2021
CVE-2020-16103 CVE record

CVSS 8.8 High

Incorrect type conversion in Gallagher Command Centre
- Gallagher Command Centre
- CWE-704
Not analysed yet 14 Dec 2020
CVE-2020-16102 CVE record

CVSS 7.1 High

Improper authentication in Gallagher Command Centre
- Gallagher Command Centre
- Authentication bypass
Not analysed yet 14 Dec 2020
CVE-2020-16104 CVE record

CVSS 8.2 High

SQL injection in Gallagher Command Centre
- Gallagher Command Centre
- SQL injection
Not analysed yet 14 Dec 2020
CVE-2020-16101 CVE record

CVSS 7.5 High

Gallagher Command Centre: It is possible for an unauthenticated remote DCOM websocket connection to crash the…
- Gallagher Command Centre
- Memory corruption
Not analysed yet 15 Sept 2020
CVE-2020-16096 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper authorization in Gallagher Command Centre
- Gallagher Command Centre
- Broken access control
Not analysed yet 15 Sept 2020
CVE-2020-16098 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper authentication in Gallagher Command Centre
- Gallagher Command Centre
- Authentication bypass
Not analysed yet 15 Sept 2020
CVE-2020-16100 CVE record

CVSS 7.5 High

Improper resource shutdown in Gallagher Command Centre
- Gallagher Command Centre
- Denial of service
Not analysed yet 15 Sept 2020
CVE-2020-16097 CVE record

CVSS 7.3 High

Insufficiently protected credentials in Gallagher Command Centre
- Gallagher Command Centre
- Hard-coded credentials
Not analysed yet 15 Sept 2020
CVE-2020-16099 CVE record

CVSS 4.3 Medium

Improper input validation in Gallagher Command Centre
- Gallagher Command Centre
- CWE-20
Not analysed yet 15 Sept 2020