Gallagher Command Centre vulnerabilities

CVEs per yearBy the year they were published

1. 20209
2. 202110
3. 20221
4. 20235
5. 20241

Newest CVEs

• CVE-2024-23194

  Improper output Neutralization for Logs (CWE-117) in the Command Centre API Diagnostics Endpoint could allow an attacker limited ability to modify Command…

  Gallagher · Command Centre

  Low3.3
• CVE-2023-23570

  Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed and lead to invalid configuration with undefined behavior. This…

  Gallagher · Command Centre

  Medium5.4
• CVE-2023-23568

  Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields. This issue affects…

  Gallagher · Command Centre

  Medium4.3
• CVE-2023-22363

  Access Zone stack overflow

  Gallagher · Command Centre

  Medium6.5
• CVE-2023-25074

  Competency access levels not enforced in the server

  Gallagher · Command Centre

  High7.1
• CVE-2023-22428

  Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage. This issue affects Command Centre: vEL8.80…

  Gallagher · Command Centre

  High7.6
• CVE-2022-26348

  Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. The Windows Registry setting allows an…

  Gallagher · Command Centre

  High8.2
• CVE-2021-23193

  Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve…

  Gallagher · Command Centre

  High8.1
• CVE-2021-23197

  Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the account that runs the…

  Gallagher · Command Centre

  Medium5.2
• CVE-2021-23167

  Improper certificate validation vulnerability in SMTP Client allows man-in-the-middle attack to retrieve sensitive information from the Command Centre Server.…

  Gallagher · Command Centre

  High8.1