Known vulnerabilities in GateManager

Vendor: Secomea
Software: GateManager
Software CPE: cpe:2.3:a:secomea:gatemanager:*:*:*:*:*:*:*:*
Website: https://www.secomea.com/
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GateManager GateManager is affected by 13 known vulnerabilities: 4 high, 5 medium, 4 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88877 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-3675		 CWE-22 Medium
No
No
 11.0.623373051 22.04.2024 SB2024042227
#VU50862 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-29026		 CWE-22 Low
No
No
 9.2c 23.02.2021 SB2021022303
#VU50861 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-29021		 CWE-79 Low
No
No
 9.3 23.02.2021 SB2021022302
#VU50860 - Permissions, Privileges, and Access Controls
CVE-2020-29031		 CWE-264 Medium
No
No
 9.2c 23.02.2021 SB2021022303
#VU50859 -
CVE-2020-29024		 Medium
No
No
 9.3 23.02.2021 SB2021022302
#VU50858 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-29023		 CWE-94 Low
No
No
 9.3 23.02.2021 SB2021022302
#VU50857 - Insufficient Verification of Data Authenticity
CVE-2020-29022		 CWE-345 Medium
No
No
 9.3 23.02.2021 SB2021022302
#VU50855 - Improper Authentication
CVE-2020-29030		 CWE-287 High
No
No
 9.4 23.02.2021 SB2021022304
#VU50854 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-29028		 CWE-79 Low
No
No
 9.4 23.02.2021 SB2021022304
#VU32890 - Use of Password Hash With Insufficient Computational Effort
CVE-2020-14512		 CWE-916 Medium
No
No
 9.2c 29.07.2020 SB2020072907
#VU32889 - Use of Hard-coded Credentials
CVE-2020-14510		 CWE-798 High
No
No
 9.2c 29.07.2020 SB2020072907
#VU32888 - Off-by-one Error
CVE-2020-14508		 CWE-193 High
No
No
 9.2c 29.07.2020 SB2020072907
#VU32887 - Improper Neutralization of Null Byte or NUL Character
CVE-2020-14500		 CWE-158 High
No
No
 9.2c 29.07.2020 SB2020072907