Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Gallagher

Gallagher Command Centre vulnerabilities

26 published CVEs name Gallagher Command Centre among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2024-23194

    Improper output Neutralization for Logs (CWE-117) in the Command Centre API Diagnostics Endpoint could allow an attacker limited ability to modify Command…

    Gallagher · Command Centre

    Low3.3
  • CVE-2023-23570

    Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed and lead to invalid configuration with undefined behavior. This…

    Gallagher · Command Centre

    Medium5.4
  • CVE-2023-23568

    Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields. This issue affects…

    Gallagher · Command Centre

    Medium4.3
  • CVE-2023-22363

    Access Zone stack overflow

    Gallagher · Command Centre

    Medium6.5
  • CVE-2023-25074

    Competency access levels not enforced in the server

    Gallagher · Command Centre

    High7.1
  • CVE-2023-22428

    Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage. This issue affects Command Centre: vEL8.80…

    Gallagher · Command Centre

    High7.6
  • CVE-2022-26348

    Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. The Windows Registry setting allows an…

    Gallagher · Command Centre

    High8.2
  • CVE-2021-23193

    Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve…

    Gallagher · Command Centre

    High8.1
  • CVE-2021-23197

    Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the account that runs the…

    Gallagher · Command Centre

    Medium5.2
  • CVE-2021-23167

    Improper certificate validation vulnerability in SMTP Client allows man-in-the-middle attack to retrieve sensitive information from the Command Centre Server.…

    Gallagher · Command Centre

    High8.1
All 26 in the list