Known vulnerabilities in Dell Policy Manager for Secure Connect Gateway (SCG) - page 5

Vendor: Dell
Software CPE: cpe:2.3:a:dell:dell_policy_manager_for_secure_connect_gateway:*:*:*:*:*:*:*:*
Total vulnerabilities: 115
Public exploits: 13
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Dell Policy Manager for Secure Connect Gateway (SCG) Dell Policy Manager for Secure Connect Gateway (SCG) is affected by 115 known vulnerabilities: 2 critical, 11 high, 66 medium, 36 low Critical High Medium Low

Vulnerabilities (115)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70666 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45143
CWE-94 Medium
No
No
5.14.00.14 03.01.2023 SB2023010329
SB2023012516
SB2023012606
and 34 more
#VU68866 - Improper Authorization
CVE-2022-31692
CWE-285 High
No
No
5.14.00.14 01.11.2022 SB2022110101
SB2022121119
SB2023011162
and 28 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252
CWE-444 Medium
No
No
5.14.00.14 31.10.2022 SB2022103146
SB2022112324
SB2022112533
and 43 more
#VU68437 - Improper input validation
CVE-2022-21628
CWE-20 Medium
No
No
5.14.00.14 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 138 more
#VU68438 - Improper input validation
CVE-2022-21626
CWE-20 Medium
No
No
5.14.00.14 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68439 - Improper input validation
CVE-2022-21618
CWE-20 Medium
No
No
5.14.00.14 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 60 more
#VU68440 - Improper input validation
CVE-2022-39399
CWE-20 Low
No
No
5.14.00.14 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 61 more
#VU68441 - Improper input validation
CVE-2022-21624
CWE-20 Low
No
No
5.14.00.14 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU68442 - Improper input validation
CVE-2022-21619
CWE-20 Low
No
No
5.14.00.14 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 140 more
#VU64627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34305
CWE-79 Medium
Available
No
5.14.00.14 23.06.2022 SB2022062338
SB2022071177
SB2022071801
and 26 more
#VU62397 - Improper input validation
CVE-2022-21449
CWE-20 Medium
Available
No
5.12.00.00 19.04.2022 SB2022041944
SB2022041945
SB2022042106
and 24 more
#VU62398 - Improper input validation
CVE-2022-21476
CWE-20 Medium
No
No
5.12.00.00 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 69 more
#VU62399 - Improper input validation
CVE-2022-21426
CWE-20 Medium
No
No
5.12.00.00 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more
#VU62400 - Improper input validation
CVE-2022-21496
CWE-20 Medium
No
No
5.12.00.00 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 118 more
#VU62401 - Improper input validation
CVE-2022-21434
CWE-20 Medium
No
No
5.12.00.00 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 111 more
#VU62402 - Improper input validation
CVE-2022-21443
CWE-20 Low
No
No
5.12.00.00 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 109 more
#VU60739 - Integer overflow
CVE-2022-25315
CWE-190 High
No
No
5.12.00.00 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 99 more
#VU60738 - Integer overflow
CVE-2022-25314
CWE-190 Medium
No
No
5.12.00.00 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 68 more
#VU60736 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25235
CWE-94 High
No
No
5.12.00.00 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 106 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Available
Exploited
5.00.05.11 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more


Showing elements 81 - 100 out of 115