medium4.2
CVE-2022-25781
Cross-site Scripting (XSS) vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session.
Impact
Cross-site Scripting (XSS) vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Secomea | Gatemanager 4250 Firmware | before 9.7.622134021 |
| Secomea | Gatemanager 4260 Firmware | before 9.7.622134021 |
| Secomea | Gatemanager 8250 Firmware | before 9.7.622134021 |
| Secomea | Gatemanager 9250 Firmware | before 9.7.622134021 |