Juust4

**Name of the Vulnerable Software and Affected Versions** Dell Secure Connect Gateway (SCG) Policy Manager, all versions **Description** The issue is related to an improper authorization vulnerability. An attacker with low privileges on an adjacent network could potentially exploit this, leading to unauthorized devices being added to policies. This may result in information disclosure and unauthorized access to the system. **Recommendations** For all versions, update to a version that includes a fix for the improper authorization vulnerability, as no specific workaround or mitigation has been provided for this issue.

**Name of the Vulnerable Software and Affected Versions** Dell Secure Connect Gateway (SCG) Policy Manager, all versions **Description** The issue concerns a Stored Cross-Site Scripting Vulnerability in the Policy page of the Dell Secure Connect Gateway (SCG) Policy Manager. This vulnerability could be exploited by an adjacent network high privileged attacker, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data store through their browser, the malicious code gets executed by the web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Dell Secure Connect Gateway (SCG) Policy Manager, all versions **Description** The issue is a Stored Cross-Site Scripting Vulnerability in the Filters page. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.