CVE-2021-32009

Cross-site Scripting (XSS) vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions.

Score

CVSS 3.1 6.1 Medium

Status

Modified - VulnerabilityReporting@secomea.com

Published

2022-03-11

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Gatemanager (Secomea)

References

• https://www.secomea.com/support/cybersecurity-advisory