← Database

CVE-2022-25781

MEDIUM CVSS: 4.2 Published: 2022-05-04 Modified: 2026-06-17

Description

Cross-site Scripting (XSS) vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session.

Affected Platforms

Secomea Gatemanager 4260 FirmwareSecomea Gatemanager 9250 FirmwareSecomea Gatemanager 9250Secomea Gatemanager 4250 FirmwareSecomea Gatemanager 8250 FirmwareSecomea Gatemanager 4260Secomea Gatemanager 8250Secomea Gatemanager 4250

Weakness Type

CWE-79, CWE-79

References