Vulnerabilities in Secomea

46 results
Vexday analysis

Secomea possui 46 vulnerabilidades catalogadas, sendo 5 críticas, mas nenhuma está sob ataque ativo (KEV) e nenhuma foi publicada recentemente. A fraqueza dominante é Cross-Site Scripting (CWE-79), indicando um padrão de vulnerabilidades de aplicação web que, embora presente, não se traduz em exploração imediata no cenário de ameaças ativas.

CVE-2022-25784CRITICALUser controllable HTML element attribute (potential XSS)EPSS 0.6%CVE-2023-2912MEDIUMSiteManager Embedded service disruptionEPSS 0.5%CVE-2023-3675MEDIUMInsufficient input validation when downloading certain file types.EPSS 0.5%CVE-2022-25779MEDIUMInsufficient scope checks allows adding unrelated audit log entriesEPSS 0.5%CVE-2020-29023LOWCSV Formula Injection possible due to improper fields escaping in GateManagerEPSS 0.5%CVE-2023-0317MEDIUMGateManager debug interface is included in non-debug buildsEPSS 0.5%CVE-2024-1579HIGHInsufficient seeding of random number generatorEPSS 0.5%CVE-2020-29030HIGHInsufficient CSRF guardsEPSS 0.5%CVE-2022-38124MEDIUMUnwanted debug toolEPSS 0.5%CVE-2020-29024MEDIUMMissing HtppOnly and Secure flagsEPSS 0.5%CVE-2021-32009MEDIUMMissing XSS guards on firmware pageEPSS 0.5%CVE-2022-25782MEDIUMInsufficient privilege checks on object access and updates.EPSS 0.5%CVE-2020-29032HIGHAdd integrity check of GateManager firmwareEPSS 0.5%CVE-2022-25781MEDIUMReflected XSS issues in GateManagerEPSS 0.5%CVE-2020-29027MEDIUMReflected Cross Site ScriptingEPSS 0.5%CVE-2024-1969HIGHHeap buffer overflowEPSS 0.5%CVE-2025-14716MEDIUMUnauthorized access to informationEPSS 0.4%CVE-2022-25778MEDIUMUnload handlers may unintentionally defeat CSRF guardsEPSS 0.3%CVE-2021-32007LOWMissing security header: Referrer-Policy URLEPSS 0.3%CVE-2022-25787HIGHGTA URLs issued by LMM WEB API may leak informationEPSS 0.2%