Approved changes feed: RSS · Atom

cpe:2.3:h:secomea:gatemanager_4250:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorSecomea (45c78ca4-ff1f-51f3-a5bb-ad82f24f54cd)
ProductGatemanager 4250 (1cd7a373-d1d0-524e-8a40-a07e305c1f97)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-25787 not_vulnerable 2026-06-08 05:41:49.450550 GTA URLs issued by LMM WEB API may leak information
HIGH (7.5)
Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7.
Published: 2022-05-04T13:58:45.000Z
Updated: 2024-08-03T04:49:43.776Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25783 not_vulnerable 2026-06-08 05:41:49.430534 Hacking attempts from logged-in users are not properly logged by GM
MEDIUM (4.3)
Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Secomea GateManager versions prior to 9.7.
Published: 2022-05-04T13:55:13.000Z
Updated: 2024-08-03T04:49:43.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25782 not_vulnerable 2026-06-08 05:41:49.429887 Insufficient privilege checks on object access and updates.
MEDIUM (5.4)
Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7.
Published: 2022-05-04T13:54:16.000Z
Updated: 2024-08-03T04:49:43.231Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25781 not_vulnerable 2026-06-08 05:41:49.429226 Reflected XSS issues in GateManager
MEDIUM (4.2)
Cross-site Scripting (XSS) vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session.
Published: 2022-05-04T13:53:17.000Z
Updated: 2024-08-03T04:49:43.192Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25780 not_vulnerable 2026-06-08 05:41:49.428618 Information leak via device availability query function
MEDIUM (4.3)
Information Exposure vulnerability in web UI of Secomea GateManager allows logged in user to query devices outside own scope.
Published: 2022-05-04T13:52:15.000Z
Updated: 2024-08-03T04:49:43.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25779 not_vulnerable 2026-06-08 05:41:49.427969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25778 not_vulnerable 2026-06-08 05:41:49.422898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32010 not_vulnerable 2026-06-08 05:31:54.595614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29031 not_vulnerable 2026-06-08 05:23:56.797556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29026 not_vulnerable 2026-06-08 05:23:56.780173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29024 not_vulnerable 2026-06-08 05:23:56.774565 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29023 not_vulnerable 2026-06-08 05:23:56.773806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29022 not_vulnerable 2026-06-08 05:23:56.772849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29021 not_vulnerable 2026-06-08 05:23:56.769434 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.