Advisories · Technology

Secomea GateManager.

Every CVE that names Secomea GateManager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-1759 CVE record

CVSS 6.5 Medium

Secomea GateManager: Improper handling of insufficient permissions or privileges vulnerability in Secomea…
- Secomea GateManager
- CWE-280
Not analysed yet 15 Sept 2026
CVE-2026-1758 CVE record

CVSS 8.3 High

Session Fixation
- Secomea GateManager
- Authentication bypass
Not analysed yet 15 Sept 2026
CVE-2025-14716 CVE record

CVSS 6.5 Medium

Unauthorized access to information
- Secomea GateManager
- Authentication bypass
Not analysed yet 19 Mar 2026
CVE-2021-32007 CVE record

CVSS 3.5 Low

Missing security header: Referrer-Policy URL
- Secomea GateManager
- Information disclosure
Not analysed yet 13 Dec 2024
CVE-2024-1969 CVE record

CVSS 8.2 High

Heap buffer overflow
- Secomea GateManager
- Memory corruption
Not analysed yet 29 Apr 2024
CVE-2024-1579 CVE record

CVSS 8.1 High

Insufficient seeding of random number generator
- Secomea GateManager
- CWE-335
Not analysed yet 29 Apr 2024
CVE-2023-3675 CVE record

CVSS 6.5 Medium

Insufficient input validation when downloading certain file types.
- Secomea GateManager
- Path traversal
Not analysed yet 18 Apr 2024
CVE-2023-0317 CVE record

CVSS 4.9 Medium

GateManager debug interface is included in non-debug builds
- Secomea GateManager
- CWE-420
Not analysed yet 19 Apr 2023
CVE-2022-4308 CVE record

CVSS 6.1 Medium

Clear-text passwords in configuration files
- Secomea GateManager
- CWE-256
Not analysed yet 19 Apr 2023
CVE-2022-2752 CVE record

CVSS 5.5 Medium

Potential vulnerabilities in GM login process
- Secomea GateManager
- Authentication bypass
Not analysed yet 9 Dec 2022
CVE-2022-38123 CVE record

CVSS 8.7 High

Insufficient validation of plugin files
- Secomea GateManager
- CWE-20
Not analysed yet 6 Dec 2022
CVE-2022-25786 CVE record

CVSS 4.9 Medium

GateManager debug interface is included in production builds
- Secomea GateManager
- CWE-420
Not analysed yet 4 May 2022
CVE-2022-25787 CVE record

CVSS 7.5 High

GTA URLs issued by LMM WEB API may leak information
- Secomea GateManager
- CWE-598
Not analysed yet 4 May 2022
CVE-2022-25783 CVE record

CVSS 4.3 Medium

Hacking attempts from logged-in users are not properly logged by GM
- Secomea GateManager
- CWE-778
Not analysed yet 4 May 2022
CVE-2022-25782 CVE record

CVSS 5.4 Medium

Insufficient privilege checks on object access and updates.
- Secomea GateManager
- CWE-274
Not analysed yet 4 May 2022
CVE-2022-25781 CVE record

CVSS 4.2 Medium

Reflected XSS issues in GateManager
- Secomea GateManager
- Cross-site scripting (XSS)
Not analysed yet 4 May 2022
CVE-2022-25780 CVE record

CVSS 4.3 Medium

Information leak via device availability query function
- Secomea GateManager
- Information disclosure
Not analysed yet 4 May 2022
CVE-2022-25779 CVE record

CVSS 4.3 Medium

Insufficient scope checks allows adding unrelated audit log entries
- Secomea GateManager
- CWE-779
Not analysed yet 4 May 2022
CVE-2022-25778 CVE record

CVSS 4.2 Medium

Unload handlers may unintentionally defeat CSRF guards
- Secomea GateManager
- Cross-site request forgery (CSRF)
Not analysed yet 4 May 2022
CVE-2021-32010 CVE record

CVSS 5.6 Medium

Clients may connect to a GateManager with TLS 1.0
- Secomea SiteManager
- Secomea LinkManager
- Weak cryptography or TLS
Not analysed yet 4 May 2022
CVE-2021-32009 CVE record

CVSS 5.0 Medium

Missing XSS guards on firmware page
- Secomea GateManager
- Cross-site scripting (XSS)
Not analysed yet 11 Mar 2022
CVE-2021-32006 CVE record

CVSS 5.0 Medium

GateManager information leak for LinkManager Users
- Secomea GateManager
- CWE-274
- CWE-275
Not analysed yet 7 Mar 2022
CVE-2021-32008 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Logged-in Administrator may get unrestricted file system access
- Secomea GateManager
- Path traversal
- Information disclosure
Not analysed yet 4 Mar 2022
CVE-2021-32004 CVE record

CVSS 3.7 Low

GateManager does not enforce strict hostname matching for WEB server
- Secomea GateManager
- CWE-923
Not analysed yet 22 Nov 2021
CVE-2020-29030 CVE record

CVSS 8.1 High

Insufficient CSRF guards
- Secomea GateManager
- Cross-site request forgery (CSRF)
Not analysed yet 5 Mar 2021
CVE-2020-29028 CVE record

CVSS 6.3 Medium

Reflected XSS issues
- Secomea GateManager
- Cross-site scripting (XSS)
Not analysed yet 5 Mar 2021
CVE-2020-29029 CVE record

CVSS 7.3 High

XSS issue due to insufficient sanitization of input field
- Secomea GateManager
- Cross-site scripting (XSS)
- CWE-20
Not analysed yet 5 Mar 2021
CVE-2020-29032 CVE record

CVSS 8.4 High

Add integrity check of GateManager firmware
- Secomea GateManager
- CWE-494
Not analysed yet 5 Mar 2021
CVE-2020-29023 CVE record

CVSS 3.5 Low

CSV Formula Injection possible due to improper fields escaping in GateManager
- Secomea GateManager
- CWE-116
Not analysed yet 16 Feb 2021
CVE-2020-29022 CVE record

CVSS 5.3 Medium

Host Header Injection allowing web cache poisoning attacks
- Secomea GateManager
- CWE-159
Not analysed yet 16 Feb 2021
CVE-2020-29024 CVE record

CVSS 5.3 Medium

Missing HtppOnly and Secure flags
- Secomea GateManager
- CWE-614
Not analysed yet 16 Feb 2021
CVE-2020-29031 CVE record

CVSS 7.1 High

Insecure Direct Object Reference in GateManager WebUI can cause privilege escalation
- Secomea GateManager
- CWE-280
Not analysed yet 15 Feb 2021
CVE-2020-29026 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Path traversal in Secomea GateManager
- Secomea GateManager
- Path traversal
Not analysed yet 15 Feb 2021
CVE-2020-29021 CVE record

CVSS 3.5 Low

Scripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS)
- Secomea GateManager
- CWE-20
Not analysed yet 8 Feb 2021
CVE-2020-14512 CVE record

CVSS 8.1 High

USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916
- Secomea GateManager
- Weak cryptography or TLS
Not analysed yet 25 Aug 2020
CVE-2020-14510 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

OFF-BY-ONE ERROR CWE-193
- Secomea GateManager
- CWE-193
Not analysed yet 25 Aug 2020
CVE-2020-14508 CVE record

CVSS 8.1 High

OFF-BY-ONE ERROR CWE-193
- Secomea GateManager
- CWE-193
Not analysed yet 25 Aug 2020