<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: secomea</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-2912: Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction.</title><link>https://patchthecve.com/cve/CVE-2023-2912.html</link><guid>https://patchthecve.com/cve/CVE-2023-2912.html</guid><pubDate>Wed, 17 Jun 2026 05:53:46 +0000</pubDate><description>MEDIUM 5.9: Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction.</description></item><item><title>CVE-2023-0317: Unprotected Alternate Channel vulnerability in debug console of  GateManager allows system administrator to ob</title><link>https://patchthecve.com/cve/CVE-2023-0317.html</link><guid>https://patchthecve.com/cve/CVE-2023-0317.html</guid><pubDate>Wed, 17 Jun 2026 05:25:16 +0000</pubDate><description>MEDIUM 4.9: Unprotected Alternate Channel vulnerability in debug console of  GateManager allows system administrator to obtain sensitive information.</description></item><item><title>CVE-2022-4308: Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse </title><link>https://patchthecve.com/cve/CVE-2022-4308.html</link><guid>https://patchthecve.com/cve/CVE-2022-4308.html</guid><pubDate>Wed, 17 Jun 2026 05:20:33 +0000</pubDate><description>MEDIUM 6.1: Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse on SiteManager, if the generated file is leaked.</description></item><item><title>CVE-2022-38125: Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP </title><link>https://patchthecve.com/cve/CVE-2022-38125.html</link><guid>https://patchthecve.com/cve/CVE-2022-38125.html</guid><pubDate>Wed, 17 Jun 2026 04:56:09 +0000</pubDate><description>LOW 2.9: Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client.</description></item><item><title>CVE-2022-38124: Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manne</title><link>https://patchthecve.com/cve/CVE-2022-38124.html</link><guid>https://patchthecve.com/cve/CVE-2022-38124.html</guid><pubDate>Wed, 17 Jun 2026 04:56:09 +0000</pubDate><description>MEDIUM 5.7: Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.</description></item><item><title>CVE-2022-2752: A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous us</title><link>https://patchthecve.com/cve/CVE-2022-2752.html</link><guid>https://patchthecve.com/cve/CVE-2022-2752.html</guid><pubDate>Wed, 17 Jun 2026 04:42:30 +0000</pubDate><description>MEDIUM 5.5: A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions.

This issue affects:

Secomea GateManager versions from 9.4 through 9.7.


</description></item><item><title>CVE-2022-38123: Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server ad</title><link>https://patchthecve.com/cve/CVE-2022-38123.html</link><guid>https://patchthecve.com/cve/CVE-2022-38123.html</guid><pubDate>Wed, 17 Jun 2026 04:56:08 +0000</pubDate><description>HIGH 8.7: Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server administrator to inject code into the GateManager interface.

This issue affects:

Secomea GateManager

versions prior to 10.0.



</description></item></channel></rss>