Policy Manager For Secure Connect Gateway vulnerabilities
29 known vulnerabilities in Policy Manager For Secure Connect Gateway from Dell. 29 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
Secure Connect Gateway (SCG) Policy Manager: Incorrect Authorization
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges an
- 7.1 High severity
Secure Connect Gateway (SCG) Policy Manager: Incorrect Permission Assignment for Critical Resource
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading t
- 8.8 High severity
Secure Connect Gateway (SCG) Policy Manager: Authorization Bypass Through User-Controlled Key
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to El
- 7.5 High severity
Secure Connect Gateway (SCG) Policy Manager: Missing Authentication for Critical Functionality
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Infor
- 8.7 High severity
Secure Connect Gateway (SCG) Policy Manager: Server-Side Request Forgery
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disc
- 8.8 High severity
Secure Connect Gateway (SCG) Policy Manager: Authorization Bypass Through User-Controlled Key
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to El
- 8.1 High severity
Secure Connect Gateway (SCG) Policy Manager: Not Failing Securely
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mec
- 8.8 High severity
Secure Connect Gateway (SCG) Policy Manager: Improper Certificate Validation
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service
- 8.8 High severity
Secure Connect Gateway (SCG) Policy Manager: Inclusion of Functionality from Untrusted Control Sphere
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leadi
- 7.1 High severity
Secure Connect Gateway (SCG) Policy Manager: Initialization of a Resource with an Insecure Default
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading t
- 9.8 Critical severity
Secure Connect Gateway (SCG) Policy Manager: Improper Restriction of Excessive Authentication Attempts
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, le
- 8.8 High severity
Secure Connect Gateway (SCG) Policy Manager: Missing Authorization
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
- 7.8 High severity
Secure Connect Gateway (SCG) Policy Manager: Incorrect Permission Assignment for Critical Resource
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading t
- 8.1 High severity
Secure Connect Gateway (SCG) Policy Manager: Cross-Site Request Forgery
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disc
- 9.8 Critical severity
Secure Connect Gateway (SCG) Policy Manager: Download of Code Without Integrity Check
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerabili
- 8.8 High severity
Secure Connect Gateway (SCG) Policy Manager: Improper Certificate Validation
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerabi
- 7.5 High severity
Secure Connect Gateway (SCG) Policy Manager: Inclusion of Sensitive Information in Source Code
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to
- 7.4 High severity
Secure Connect Gateway (SCG) Policy Manager: Missing Authentication for Critical Functionality
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unaut
- 9.8 Critical severity
Secure Connect Gateway (SCG) Policy Manager: Permissive Cross-domain Security Policy with Untrusted Domains
SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious actions on the application
- 7.6 High severity
Secure Connect Gateway (SCG) Policy Manager: Improper Neutralization of Input During Web Page Generation
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in the Filters page. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of mal
- 7.6 High severity
Secure Connect Gateway (SCG) Policy Manager: Improper Neutralization of Input During Web Page Generation
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaS
- 7.6 High severity
Secure Connect Gateway (SCG) Policy Manager: Improper Neutralization of Input During Web Page Generation
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaS
- 8.0 High severity
Secure Connect Gateway (SCG) Policy Manager: Weak Password Recovery Mechanism for Forgotten Password
Dell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, contain a weak password recovery mechanism for forgotten passwords. An adjacent network low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to the
- 7.6 High severity
Secure Connect Gateway (SCG) Policy Manager: Improper Neutralization of Input During Web Page Generation
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in Policy page. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of maliciou
- 7.3 High severity
Secure Connect Gateway (SCG) Policy Manager: Improper Authorization
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain an improper authorization vulnerability. An adjacent network low privileged attacker could potentially exploit this vulnerability, leading to unauthorized devices added to policies. Exploi
- 7.8 High severity
Secure Connect Gateway (SCG) Policy Manager: Use of Hard-coded Credentials
Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a Hard-coded Password Vulnerability. An attacker, with the knowledge of the hard-coded credentials, could potentially exploit this vulnerability to login to the system to gain admin privileges
- 9.8 Critical severity
Secure Connect Gateway (SCG) Policy Manager: Use of Hard-coded Credentials
Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability. An attacker with the knowledge of the hard-coded sensitive information, could potentially exploit this vulnerability to login to the sys
- 9.8 Critical severity
Secure Connect Gateway (SCG) Policy Manager: Use of Hard-coded Credentials
Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability. An attacker with the knowledge of the hard-coded sensitive information, could potentially exploit this vulnerability to login to the sys
- 9.8 Critical severity
Secure Connect Gateway (SCG) Policy Manager: Use of Hard-coded Credentials
Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability. An attacker with the knowledge of the hard-coded sensitive information, could potentially exploit this vulnerability to login to the sys