7.5
High
CVE-2024-37131 SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability
Description
SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious actions on the application in the context of the authenticated user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Secure Connect Gateway (SCG) Policy Manager 5.18 | 5.18.20 → 5.22.00.18 | No fix stated |
| secure_connect_gateway_policy_manager 5.18 | 5.18.20 → 5.22.00.18 | No fix stated |
Other CVEs of Secure Connect Gateway (SCG) Policy Manager
The 45 CVEs of Secure Connect Gateway (SCG) Policy Manager →
CVE-2026-78341
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization…
6.5
Medium
CVE-2026-78340
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a…
6.3
Medium
CVE-2026-78339
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission…
6.3
Medium
CVE-2026-78027
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery…
5.8
Medium