Known vulnerabilities in Dell Policy Manager for Secure Connect Gateway (SCG) - page 6

Known vulnerabilities in Dell Policy Manager for Secure Connect Gateway (SCG) - page 6

Vendor: Dell

Software: Dell Policy Manager for Secure Connect Gateway (SCG)

Software CPE: cpe:2.3:a:dell:dell_policy_manager_for_secure_connect_gateway:*:*:*:*:*:*:*:*

Website: https://www.delltechnologies.com/en-us/index.htm

Total vulnerabilities: 115

Public exploits: 13

Known exploited (KEV): 4

Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Vulnerabilities (115)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU65888 - Improper Control of Generation of Code ('Code Injection') CVE-2021-43466	CWE-94	High	No	No	5.12.00.00	29.07.2022	SB2022072916
#VU65859 - Resource exhaustion CVE-2020-29651	CWE-400	Medium	No	No	5.12.00.00	28.07.2022	SB2022072916 SB2022081723 SB2022093029 and 8 more
#VU65849 - Exposure of sensitive information to an unauthorized actor CVE-2021-3800	CWE-200	Medium	No	No	5.12.00.00	28.07.2022	SB2022072819 SB2022072916 SB2021111048 and 9 more
#VU63345 - Improper Authorization CVE-2022-22978	CWE-285	High	Available	No	5.12.00.00	17.05.2022	SB2022051717 SB2022052009 SB2022052010 and 20 more
#VU63084 - Improper input validation CVE-2022-22970	CWE-20	Medium	No	No	5.12.00.00	12.05.2022	SB2022051201 SB2022060620 SB2022062223 and 23 more
#VU62314 - Security Features CVE-2022-22968	CWE-254	Medium	Available	No	5.12.00.00	14.04.2022	SB2022041405 SB2022042903 SB2022060324 and 31 more
#VU61760 - Incorrect Regular Expression CVE-2022-22950	CWE-185	Medium	No	No	5.12.00.00	31.03.2022	SB2022033110 SB2022060308 SB2022060324 and 25 more
#VU61756 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22965	CWE-94	Critical	Available	Exploited	5.12.00.00	31.03.2022	SB2022033109 SB2022040109 SB2022040110 and 78 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-0778	CWE-835	Medium	Available	No	5.12.00.00	15.03.2022	SB2022031520 SB2022031522 SB2022031611 and 238 more
#VU60972 - Permissions, Privileges, and Access Controls CVE-2022-23648	CWE-264	Medium	Available	No	5.12.00.00	03.03.2022	SB2022030305 SB2022030722 SB2022030725 and 30 more
#VU60842 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-24407	CWE-89	High	No	No	5.12.00.00	24.02.2022	SB2022022409 SB2022022410 SB2022022421 and 67 more
#VU60737 - Stack-based buffer overflow CVE-2022-25313	CWE-121	High	No	No	5.12.00.00	21.02.2022	SB2022022109 SB2022022113 SB2022022411 and 64 more
#VU60733 - Improper input validation CVE-2022-25236	CWE-20	Medium	No	No	5.12.00.00	21.02.2022	SB2022022109 SB2022022113 SB2022022411 and 109 more
#VU54077 - Resource exhaustion CVE-2021-33503	CWE-400	Medium	No	No	5.12.00.00	13.06.2021	SB2021061304 SB2021061305 SB2021071501 and 36 more
#VU50990 - Integer overflow CVE-2020-36242	CWE-190	High	No	No	5.12.00.00	28.02.2021	SB2021022812 SB2021022813 SB2021052024 and 27 more

Showing elements 101 - 120 out of 115