CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NCVE-2020-29022
Medium (5.3) in secomea. EPSS 0.8% chance of exploitation in the next 30 days.
Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
- CWE
- CWE-159
- Published
- Modified
- Record from
- the NVD, synced
Affected
- secomea:gatemanager_4250_firmware
- secomea:gatemanager_4260_firmware
- secomea:gatemanager_8250_firmware
- secomea:gatemanager_9250_firmware