Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

GateManager Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Published	Severity

`CVE-2026-1759`	Exploitation statusNot known exploited	FixYes	Published09/15/2026	SeverityMedium
`CVE-2026-1758`Session Fixation	Exploitation statusNot known exploited	FixYes	Published09/15/2026	SeverityHigh
`CVE-2025-14716`Unauthorized access to information	Exploitation statusNot known exploited	FixYes	Published03/19/2026	SeverityMedium
`CVE-2021-32007`Missing security header: Referrer-Policy URL	Exploitation statusNot known exploited	FixYes	Published12/13/2024	SeverityLow
`CVE-2024-1969`Heap buffer overflow	Exploitation statusNot known exploited	FixYes	Published04/29/2024	SeverityHigh
`CVE-2024-1579`Insufficient seeding of random number generator	Exploitation statusNot known exploited	FixYes	Published04/29/2024	SeverityHigh
`CVE-2023-3675`Insufficient input validation when downloading certain file types.	Exploitation statusNot known exploited	FixYes	Published04/18/2024	SeverityMedium
`CVE-2023-0317`GateManager debug interface is included in non-debug builds	Exploitation statusNot known exploited	FixYes	Published04/19/2023	SeverityMedium
`CVE-2022-4308`Clear-text passwords in configuration files	Exploitation statusNot known exploited	FixYes	Published04/19/2023	SeverityHigh
`CVE-2022-2752`Potential vulnerabilities in GM login process	Exploitation statusNot known exploited	FixYes	Published12/09/2022	SeverityMedium
`CVE-2022-38123`Insufficient validation of plugin files	Exploitation statusNot known exploited	FixYes	Published12/06/2022	SeverityHigh
`CVE-2022-25786`GateManager debug interface is included in production builds	Exploitation statusNot confirmed	FixYes	Published05/04/2022	SeverityMedium
`CVE-2022-25787`GTA URLs issued by LMM WEB API may leak information	Exploitation statusNot confirmed	FixYes	Published05/04/2022	SeverityHigh
`CVE-2022-25783`Hacking attempts from logged-in users are not properly logged by GM	Exploitation statusNot confirmed	FixYes	Published05/04/2022	SeverityMedium
`CVE-2022-25782`Insufficient privilege checks on object access and updates.	Exploitation statusNot confirmed	FixYes	Published05/04/2022	SeverityMedium
`CVE-2022-25781`Reflected XSS issues in GateManager	Exploitation statusNot confirmed	FixYes	Published05/04/2022	SeverityMedium
`CVE-2022-25780`Information leak via device availability query function	Exploitation statusNot confirmed	FixYes	Published05/04/2022	SeverityMedium
`CVE-2022-25779`Insufficient scope checks allows adding unrelated audit log entries	Exploitation statusNot confirmed	FixYes	Published05/04/2022	SeverityMedium
`CVE-2022-25778`Unload handlers may unintentionally defeat CSRF guards	Exploitation statusNot confirmed	FixYes	Published05/04/2022	SeverityMedium
`CVE-2021-32010`Clients may connect to a GateManager with TLS 1.0	Exploitation statusNot confirmed	FixYes	Published05/04/2022	SeverityMedium
`CVE-2021-32009`Missing XSS guards on firmware page	Exploitation statusNot confirmed	FixNot confirmed	Published03/11/2022	SeverityMedium
`CVE-2021-32006`GateManager information leak for LinkManager Users	Exploitation statusNot confirmed	FixNot confirmed	Published03/07/2022	SeverityMedium
`CVE-2021-32008`Logged-in Administrator may get unrestricted file system access	Exploitation statusNot confirmed	FixNot confirmed	Published03/04/2022	SeverityCritical
`CVE-2021-32004`GateManager does not enforce strict hostname matching for WEB server	Exploitation statusNot confirmed	FixYes	Published11/22/2021	SeverityLow
`CVE-2020-29030`Insufficient CSRF guards	Exploitation statusNot confirmed	FixYes	Published03/05/2021	SeverityHigh
`CVE-2020-29028`Reflected XSS issues	Exploitation statusNot confirmed	FixYes	Published03/05/2021	SeverityMedium
`CVE-2020-29029`XSS issue due to insufficient sanitization of input field	Exploitation statusNot confirmed	FixYes	Published03/05/2021	SeverityHigh
`CVE-2020-29032`Add integrity check of GateManager firmware	Exploitation statusNot confirmed	FixYes	Published03/05/2021	SeverityHigh
`CVE-2020-29023`CSV Formula Injection possible due to improper fields escaping in GateManager	Exploitation statusNot confirmed	FixYes	Published02/16/2021	SeverityLow
`CVE-2020-29022`Host Header Injection allowing web cache poisoning attacks	Exploitation statusNot confirmed	FixYes	Published02/16/2021	SeverityMedium
`CVE-2020-29024`Missing HtppOnly and Secure flags	Exploitation statusNot confirmed	FixYes	Published02/16/2021	SeverityMedium
`CVE-2020-29031`Insecure Direct Object Reference in GateManager WebUI can cause privilege escalation	Exploitation statusNot confirmed	FixYes	Published02/15/2021	SeverityHigh
`CVE-2020-29026`	Exploitation statusNot confirmed	FixYes	Published02/15/2021	SeverityCritical
`CVE-2020-29021`Scripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS)	Exploitation statusNot confirmed	FixYes	Published02/08/2021	SeverityLow
`CVE-2020-14512`USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916	Exploitation statusNot confirmed	FixYes	Published08/25/2020	SeverityHigh
`CVE-2020-14510`OFF-BY-ONE ERROR CWE-193	Exploitation statusNot confirmed	FixYes	Published08/25/2020	SeverityCritical
`CVE-2020-14508`OFF-BY-ONE ERROR CWE-193	Exploitation statusNot confirmed	FixYes	Published08/25/2020	SeverityHigh

37 / 37 Results

All vulnerabilities loaded

Security vulnerabilities in GateManager

GateManager

How many security vulnerabilities does GateManager currently have?

Does the latest version of GateManager have any known vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management