GM
Vendor
gm_alex
3
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-19797 | UA User Access Manager gm_alex | 6.1 | Sep 9 | User Access Manager <= 2.3.18 - Reflected Cross-Site Scripting via 'tab_group_section' Parameter |
| CVE-2026-15281 | UA User Access Manager gm_alex | 6.5 | Aug 5 | User Access Manager <= 2.3.12 - Authenticated (Subscriber+) SQL Injection |
| CVE-2026-18352 | UA User Access Manager gm_alex | 7.5 | Aug 1 | User Access Manager <= 2.3.15 - Unauthenticated Arbitrary File Read via 'uamgetfile' Parameter |
