Approved changes feed: RSS · Atom

cpe:2.3:a:dell:secure_connect_gateway-appliance:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductSecure Connect Gateway Appliance (0b7d9ebd-0c74-5ec3-815e-02091b7c30ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-29169 vulnerable 2026-06-08 06:33:28.881330 Details available
MEDIUM (5.4)
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing potential unauthorized access and modification of application data.
Published: 2024-06-13T15:13:44.030Z
Updated: 2025-08-27T15:52:36.412Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29168 vulnerable 2026-06-08 06:33:28.880553 Details available
MEDIUM (5.4)
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing potential unauthorized access and modification of application data.
Published: 2024-06-13T15:09:31.764Z
Updated: 2024-08-02T01:10:54.079Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28969 vulnerable 2026-06-08 06:33:28.248617 Details available
MEDIUM (4.3)
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API (if enabled by Admin user from UI). A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain APIs applicable only for Admin Users on the application's backend database that could potentially allow an unauthorized user access to restricted resources.
Published: 2024-06-13T15:05:01.940Z
Updated: 2024-08-02T01:03:51.512Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28968 vulnerable 2026-06-08 06:33:28.247871 Details available
MEDIUM (5.4)
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for internal email and collection settings REST APIs (if enabled by Admin user from UI). A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain APIs applicable only for Admin Users on the application's backend database that could potentially allow an unauthorized user access to restricted resources and change of state.
Published: 2024-06-13T15:01:22.196Z
Updated: 2024-08-02T01:03:51.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28967 vulnerable 2026-06-08 06:33:28.247251 Details available
MEDIUM (5.4)
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal maintenance REST API (if enabled by Admin user from UI). A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain APIs applicable only for Admin Users on the application's backend database that could potentially allow an unauthorized user access to restricted resources and change of state.
Published: 2024-06-13T14:57:23.532Z
Updated: 2024-08-02T01:03:51.273Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28966 vulnerable 2026-06-08 06:33:28.243881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28965 vulnerable 2026-06-08 06:33:28.242446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44294 vulnerable 2026-06-08 06:12:39.936414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44293 vulnerable 2026-06-08 06:12:39.934603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.