Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior

Críticas / altas1273▼ 220 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior

234 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2016-0635	Modificada	Alta (8.8)	5.1%	—	Oracle Documaker Oracle Enterprise Manager OPS Center Oracle Health Sciences Information Manager Oracle Healthcare Master Person Index+7	21/7/2016	17/6/2026	Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle Healthcare Master Person Index…
CVE-2016-0522	Modificada	Alta (7.5)	2.0%	—	Oracle Retail Open Commerce Platform Cloud Service	21/1/2016	17/6/2026	Unspecified vulnerability in the Oracle Retail Open Commerce Platform Cloud Service component in Oracle Retail Applications 3.5, 4.5, 4.7, and 5.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Framework.
CVE-2016-0506	Modificada	Media (4.3)	1.6%	—	Oracle Retail Order Management System Cloud Service	21/1/2016	17/6/2026	Unspecified vulnerability in the Oracle Retail Order Management System Cloud Service component in Oracle Retail Applications 3.5, 4.5, 4.7, 5.0, and 15.0 allows remote attackers to affect confidentiality via unknown vectors related to Order Entry.
CVE-2016-0500	Modificada	Alta (7.5)	2.0%	—	Oracle Retail Order Broker Cloud Service	21/1/2016	17/6/2026	Unspecified vulnerability in the Oracle Retail Order Broker Cloud Service component in Oracle Retail Applications 4.0 and 4.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to System Administration.
CVE-2015-3253	Modificada	Crítica (9.8)	41%	—	Apache Groovy Oracle Health Sciences Clinical Development Center Oracle Retail Order Broker Cloud Service Oracle Retail Service Backbone+2	13/8/2015	17/6/2026	The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.
CVE-2014-8474	Modificada	Alta (7.5)	2.5%	—	CA Cloud Service Management	4/11/2014	17/6/2026	CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an…
CVE-2014-8473	Modificada	Media (6.8)	1.1%	—	CA Cloud Service Management	4/11/2014	17/6/2026	Cross-site request forgery (CSRF) vulnerability in CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVE-2014-8472	Modificada	Media (6.8)	2.2%	—	CA Cloud Service Management	4/11/2014	17/6/2026	CA Cloud Service Management (CSM) before Summer 2014 does not properly verify authentication tokens from an Identity Provider, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors.
CVE-2014-8471	Modificada	Media (4.3)	1.8%	—	CA Cloud Service Management	4/11/2014	17/6/2026	CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to conduct replay attacks via unspecified vectors.