secure_connect_gateway_policy_manager vulnerabilities

4 known vulnerabilities in secure_connect_gateway_policy_manager from Dell. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Secure Connect Gateway (SCG) Policy Manager: Permissive Cross-domain Security Policy with Untrusted Domains

  CVE-2024-37131Jun 13, 2024Dell

  SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious actions on the application

• 7.6 High severity

  Secure Connect Gateway (SCG) Policy Manager: Improper Neutralization of Input During Web Page Generation

  CVE-2024-24905Mar 1, 2024Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaS

• 8.0 High severity

  Secure Connect Gateway (SCG) Policy Manager: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2024-24903Mar 1, 2024Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, contain a weak password recovery mechanism for forgotten passwords. An adjacent network low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to the

• 7.3 High severity

  Secure Connect Gateway (SCG) Policy Manager: Improper Authorization

  CVE-2024-24900Mar 1, 2024Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain an improper authorization vulnerability. An adjacent network low privileged attacker could potentially exploit this vulnerability, leading to unauthorized devices added to policies. Exploi