Command Centre
Approved changes feed: RSS · Atom
cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gallagher (1a83fbe6-3e6e-58bd-a69d-5a0946535413) |
|---|---|
| Product | Command Centre (08024ced-e26e-56a2-b7c3-eb8925b0e80b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-23194 |
vulnerable | 2026-06-08 06:29:37.009410 |
Details available
LOW (3.3)
Improper output Neutralization for Logs (CWE-117) in the Command Centre API Diagnostics Endpoint could allow an attacker limited ability to modify Command Centre log files.
This issue affects: Gallagher Command Centre v9.10 prior to vEL9.10.1268 (MR1).
Published: 2024-07-11T02:39:08.929Z
Updated: 2024-08-01T22:59:31.449Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21838 |
vulnerable | 2026-06-08 06:27:36.767608 |
Details available
MEDIUM (6.8)
Improper neutralization of special elements in output (CWE-74) used by the email generation feature of the Command Centre Server could lead to HTML code injection in emails generated by Command Centre.
This issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6), all version of 8.60 and prior.
Published: 2024-03-05T03:11:55.586Z
Updated: 2024-08-01T22:27:36.320Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21815 |
vulnerable | 2026-06-08 06:27:36.726015 |
Details available
CRITICAL (9.1)
Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are accessible to authenticated but unprivileged users.
This issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6), all version of 8.60 and prior.
Published: 2024-03-05T03:09:52.505Z
Updated: 2024-08-01T22:27:36.314Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46686 |
vulnerable | 2026-06-08 06:14:22.769843 |
Details available
MEDIUM (5.5)
A reliance on untrusted inputs in a security decision could be exploited by a privileged user to configure the Gallagher Command Centre Diagnostics Service to use less secure communication protocols.
This issue affects: Gallagher Diagnostics Service prior to v1.3.0 (distributed in 9.00.1507(MR1)).
Published: 2023-12-18T22:01:03.342Z
Updated: 2024-10-01T15:59:10.520Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25074 |
vulnerable | 2026-06-08 05:56:08.490993 |
Competency access levels not enforced in the server
HIGH (7.1)
Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Competencies.
This issue affects Command Centre: vEL8.90 prior to vEL8.90.1318 (MR1), vEL8.80 prior to vEL8.80.1192 (MR2), vEL8.70 prior to vEL8.70.2185 (MR4),
vEL8.60 prior to vEL8.60.2347 (MR6),
vEL8.50 prior to vEL8.50.2831 (MR8), all versions vEL8.40 and prior.
Published: 2023-07-24T23:05:24.657Z
Updated: 2024-10-17T13:04:13.832Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23584 |
vulnerable | 2026-06-08 05:56:03.710267 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23576 |
vulnerable | 2026-06-08 05:56:03.348067 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23570 |
vulnerable | 2026-06-08 05:56:03.232185 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23568 |
vulnerable | 2026-06-08 05:56:03.227783 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22439 |
vulnerable | 2026-06-08 05:54:25.994922 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22428 |
vulnerable | 2026-06-08 05:54:25.970806 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22363 |
vulnerable | 2026-06-08 05:54:24.935253 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26348 |
vulnerable | 2026-06-08 05:41:51.339288 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23230 |
vulnerable | 2026-06-08 05:30:02.537954 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23211 |
vulnerable | 2026-06-08 05:30:02.441682 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23205 |
vulnerable | 2026-06-08 05:30:02.437195 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23204 |
vulnerable | 2026-06-08 05:30:02.436814 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23197 |
vulnerable | 2026-06-08 05:30:02.405265 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23193 |
vulnerable | 2026-06-08 05:30:02.389209 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23182 |
vulnerable | 2026-06-08 05:30:02.380106 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23167 |
vulnerable | 2026-06-08 05:30:02.321924 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23146 |
vulnerable | 2026-06-08 05:30:02.295256 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23140 |
vulnerable | 2026-06-08 05:30:02.293366 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23136 |
vulnerable | 2026-06-08 05:30:02.284605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7215 |
vulnerable | 2026-06-08 05:27:12.613808 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16104 |
vulnerable | 2026-06-08 05:19:27.378396 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16103 |
vulnerable | 2026-06-08 05:19:27.374958 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16102 |
vulnerable | 2026-06-08 05:19:27.367999 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16101 |
vulnerable | 2026-06-08 05:19:27.367552 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16100 |
vulnerable | 2026-06-08 05:19:27.367131 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16099 |
vulnerable | 2026-06-08 05:19:27.366712 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16098 |
vulnerable | 2026-06-08 05:19:27.364553 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16097 |
vulnerable | 2026-06-08 05:19:27.361054 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16096 |
vulnerable | 2026-06-08 05:19:27.358006 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19802 |
vulnerable | 2026-06-08 05:13:23.768190 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19801 |
vulnerable | 2026-06-08 05:13:23.764872 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15294 |
vulnerable | 2026-06-08 05:12:57.187407 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12492 |
vulnerable | 2026-06-08 05:12:39.239257 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.