Dell Policy Manager For Secure Connect Gateway vulnerabilities

48 CVEs affecting Dell Policy Manager For Secure Connect Gateway, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-78341, published 2026-10-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-37131, published 2024-06-13. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability,…
CVE-2022-34441, published 2023-01-11. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability. An attacker with the knowledge of the hard-coded sensitive information,…
CVE-2022-34440, published 2023-01-11. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability. An attacker with the knowledge of the hard-coded sensitive information,…
CVE-2024-24905, published 2024-03-01. High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days. Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability. An adjacent network high privileged attacker could potentially exploit this…
CVE-2024-24904, published 2024-03-01. High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days. Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability. An adjacent network high privileged attacker could potentially exploit this…
CVE-2023-39252, published 2023-09-21. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. Dell SCG Policy Manager 5.16.00.14 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by performing MitM attacks…
CVE-2024-24907, published 2024-03-01. High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days. Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in the Filters page. An adjacent network high privileged attacker could…
CVE-2024-24906, published 2024-03-01. High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days. Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in Policy page. An adjacent network high privileged attacker could potentially…
CVE-2022-34442, published 2023-01-18. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability. An attacker with the knowledge of the hard-coded sensitive information,…
CVE-2024-24903, published 2024-03-01. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. Dell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, contain a weak password recovery mechanism for forgotten passwords. An adjacent network low privileged attacker could potentially…

Latest

CVE-2026-78341, published 2026-10-09. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. A high privileged attacker with remote access could potentially…
CVE-2026-78340, published 2026-10-09. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high…
CVE-2026-78339, published 2026-10-09. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local…
CVE-2026-78027, published 2026-10-09. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could…
CVE-2026-78026, published 2026-10-09. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote…
CVE-2026-78025, published 2026-10-09. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access…
CVE-2026-78024, published 2026-10-09. High severity, CVSS 8.7. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could…
CVE-2026-78023, published 2026-10-09. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote…
CVE-2026-78022, published 2026-10-09. High severity, CVSS 8.1. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low privileged attacker with remote access could…
CVE-2026-78021, published 2026-10-09. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive Information vulnerability. An unauthenticated attacker with…