<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: gatemanager</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-0317: Unprotected Alternate Channel vulnerability in debug console of  GateManager allows system administrator to ob</title><link>https://patchthecve.com/cve/CVE-2023-0317.html</link><guid>https://patchthecve.com/cve/CVE-2023-0317.html</guid><pubDate>Wed, 17 Jun 2026 05:25:16 +0000</pubDate><description>MEDIUM 4.9: Unprotected Alternate Channel vulnerability in debug console of  GateManager allows system administrator to obtain sensitive information.</description></item><item><title>CVE-2022-4308: Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse </title><link>https://patchthecve.com/cve/CVE-2022-4308.html</link><guid>https://patchthecve.com/cve/CVE-2022-4308.html</guid><pubDate>Wed, 17 Jun 2026 05:20:33 +0000</pubDate><description>MEDIUM 6.1: Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse on SiteManager, if the generated file is leaked.</description></item><item><title>CVE-2022-2752: A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous us</title><link>https://patchthecve.com/cve/CVE-2022-2752.html</link><guid>https://patchthecve.com/cve/CVE-2022-2752.html</guid><pubDate>Wed, 17 Jun 2026 04:42:30 +0000</pubDate><description>MEDIUM 5.5: A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions.

This issue affects:

Secomea GateManager versions from 9.4 through 9.7.


</description></item><item><title>CVE-2022-38123: Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server ad</title><link>https://patchthecve.com/cve/CVE-2022-38123.html</link><guid>https://patchthecve.com/cve/CVE-2022-38123.html</guid><pubDate>Wed, 17 Jun 2026 04:56:08 +0000</pubDate><description>HIGH 8.7: Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server administrator to inject code into the GateManager interface.

This issue affects:

Secomea GateManager

versions prior to 10.0.



</description></item><item><title>CVE-2022-25786: Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obt</title><link>https://patchthecve.com/cve/CVE-2022-25786.html</link><guid>https://patchthecve.com/cve/CVE-2022-25786.html</guid><pubDate>Wed, 17 Jun 2026 04:34:16 +0000</pubDate><description>MEDIUM 4.9: Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information. This issue affects: GateManager all versions prior to 9.7.</description></item><item><title>CVE-2021-32009: Cross-site Scripting (XSS) vulnerability in firmware section of Secomea GateManager allows logged in user to i</title><link>https://patchthecve.com/cve/CVE-2021-32009.html</link><guid>https://patchthecve.com/cve/CVE-2021-32009.html</guid><pubDate>Wed, 17 Jun 2026 03:52:40 +0000</pubDate><description>MEDIUM 5.0: Cross-site Scripting (XSS) vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions.</description></item><item><title>CVE-2021-32006: This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions</title><link>https://patchthecve.com/cve/CVE-2021-32006.html</link><guid>https://patchthecve.com/cve/CVE-2021-32006.html</guid><pubDate>Wed, 17 Jun 2026 03:52:39 +0000</pubDate><description>MEDIUM 5.0: This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files.</description></item><item><title>CVE-2021-32008: This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions</title><link>https://patchthecve.com/cve/CVE-2021-32008.html</link><guid>https://patchthecve.com/cve/CVE-2021-32008.html</guid><pubDate>Wed, 17 Jun 2026 03:52:40 +0000</pubDate><description>CRITICAL 9.9: This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Improper Limitation of a Pathname to restricted directory, allows logged in GateManager admin to delete system Files or Directories.</description></item></channel></rss>