Policy Manager For Secure Connect Gateway
Approved changes feed: RSS · Atom
cpe:2.3:a:dell:policy_manager_for_secure_connect_gateway:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3) |
|---|---|
| Product | Policy Manager For Secure Connect Gateway (bfaf4cdf-f9be-5f72-bf60-b91b7a7c7dc8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36592 |
vulnerable | 2026-06-08 07:21:02.071918 |
Details available
MEDIUM (5.4)
Dell Secure Connect Gateway (SCG) Policy Manager, version(s) 5.20. 5.22, 5.24, 5.26, 5.28, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
Published: 2025-10-30T15:26:59.326Z
Updated: 2025-10-30T17:37:02.064Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37131 |
vulnerable | 2026-06-08 06:39:46.677062 |
Details available
HIGH (7.5)
SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious actions on the application in the context of the authenticated user.
Published: 2024-06-13T14:35:24.334Z
Updated: 2024-08-02T03:50:54.539Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24907 |
vulnerable | 2026-06-08 06:29:41.992714 |
Details available
HIGH (7.6)
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in the Filters page. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.
Published: 2024-03-01T13:14:30.093Z
Updated: 2024-08-15T19:05:32.153Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24906 |
vulnerable | 2026-06-08 06:29:41.992162 |
Details available
HIGH (7.6)
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in Policy page. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.
Published: 2024-03-01T13:06:31.021Z
Updated: 2024-08-01T23:28:12.896Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24905 |
vulnerable | 2026-06-08 06:29:41.991647 |
Details available
HIGH (7.6)
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.
Published: 2024-03-01T13:19:33.871Z
Updated: 2024-08-26T18:38:40.292Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24904 |
vulnerable | 2026-06-08 06:29:41.991020 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24903 |
vulnerable | 2026-06-08 06:29:41.990506 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24900 |
vulnerable | 2026-06-08 06:29:41.988408 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34462 |
vulnerable | 2026-06-08 05:44:53.573552 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34442 |
vulnerable | 2026-06-08 05:44:53.536556 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34441 |
vulnerable | 2026-06-08 05:44:53.534780 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34440 |
vulnerable | 2026-06-08 05:44:53.534274 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.