Approved changes feed: RSS · Atom

cpe:2.3:h:secomea:gatemanager_4260:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorSecomea (45c78ca4-ff1f-51f3-a5bb-ad82f24f54cd)
ProductGatemanager 4260 (370684e9-433b-53e2-b7d7-8f978ba11696)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-25787 not_vulnerable 2026-06-08 05:41:49.450587 GTA URLs issued by LMM WEB API may leak information
HIGH (7.5)
Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7.
Published: 2022-05-04T13:58:45.000Z
Updated: 2024-08-03T04:49:43.776Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25783 not_vulnerable 2026-06-08 05:41:49.430568 Hacking attempts from logged-in users are not properly logged by GM
MEDIUM (4.3)
Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Secomea GateManager versions prior to 9.7.
Published: 2022-05-04T13:55:13.000Z
Updated: 2024-08-03T04:49:43.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25782 not_vulnerable 2026-06-08 05:41:49.429924 Insufficient privilege checks on object access and updates.
MEDIUM (5.4)
Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7.
Published: 2022-05-04T13:54:16.000Z
Updated: 2024-08-03T04:49:43.231Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25781 not_vulnerable 2026-06-08 05:41:49.429264 Reflected XSS issues in GateManager
MEDIUM (4.2)
Cross-site Scripting (XSS) vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session.
Published: 2022-05-04T13:53:17.000Z
Updated: 2024-08-03T04:49:43.192Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25780 not_vulnerable 2026-06-08 05:41:49.428654 Information leak via device availability query function
MEDIUM (4.3)
Information Exposure vulnerability in web UI of Secomea GateManager allows logged in user to query devices outside own scope.
Published: 2022-05-04T13:52:15.000Z
Updated: 2024-08-03T04:49:43.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25779 not_vulnerable 2026-06-08 05:41:49.428005 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25778 not_vulnerable 2026-06-08 05:41:49.424219 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32010 not_vulnerable 2026-06-08 05:31:54.597051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29031 not_vulnerable 2026-06-08 05:23:56.797593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29026 not_vulnerable 2026-06-08 05:23:56.780209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29024 not_vulnerable 2026-06-08 05:23:56.774605 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29023 not_vulnerable 2026-06-08 05:23:56.773846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29022 not_vulnerable 2026-06-08 05:23:56.772964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29021 not_vulnerable 2026-06-08 05:23:56.770870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.