Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3528▲ 849 respecto a la semana anterior
Críticas / altas1666▲ 255 respecto a la semana anterior
Nueva explotación activa (KEV)5→ sin cambios respecto a la semana anterior
Sin puntuar (sin CVSS)258▲ 246 respecto a la semana anterior
13.182 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (9.8) | 0.51% | — | Oracle Agile Product Lifecycle Management | 17/6/2026 | 25/8/2026 | Vulnerabilidad en el producto Oracle Agile PLM de Oracle Supply Chain (componente: Security). La versión compatible afectada es la 9.3.6. Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Agile PLM. Los ataques con éxito a esta… | |
| Analizada | Crítica (9.1) | 0.45% | 💥 PoC | Oracle Application Performance Management | 17/6/2026 | 18/6/2026 | Vulnerability in the APM - Application Performance Management product of Oracle Enterprise Manager (component: JADM, JVM Diagnostics). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise APM - Application… | |
| Analizada | Crítica (9.8) | 0.51% | — | Oracle Enterprise Manager Base Platform | 17/6/2026 | 18/6/2026 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise… | |
| Analizada | Crítica (9.6) | 0.47% | — | Oracle Enterprise Manager Base Platform | 17/6/2026 | 18/6/2026 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Manager… | |
| Analizada | Crítica (9.9) | 0.43% | — | Oracle Enterprise Manager Base Platform | 17/6/2026 | 18/6/2026 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager… | |
| Analizada | Crítica (9.9) | 0.43% | — | Oracle Enterprise Manager Base Platform | 17/6/2026 | 18/6/2026 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Target Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Manager… | |
| Analizada | Crítica (9.6) | 0.47% | — | Oracle Enterprise Manager Base Platform | 17/6/2026 | 18/6/2026 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Manager… | |
| Analizada | Crítica (9.9) | 0.43% | — | Oracle Enterprise Manager Base Platform | 17/6/2026 | 18/6/2026 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager… | |
| Analizada | Alta (8.1) | 0.44% | — | Oracle Peoplesoft Enterprise Campus Software Campus Community | 17/6/2026 | 31/7/2026 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community.… | |
| Analizada | Crítica (9.9) | 0.55% | — | Oracle Mysql Shell | 17/6/2026 | 22/6/2026 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code). The supported version that is affected is 2026.2.0+9.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MySQL Shell. While the vulnerability is in MySQL Shell, attacks… | |
| Analizada | Alta (8.1) | 0.36% | — | Oracle Peoplesoft Enterprise CS Student Financials | 17/6/2026 | 23/6/2026 | Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (component: Other). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student Financials.… | |
| Modificada | Alta (7.9) | 0.15% | — | Oracle Weblogic Server | 17/6/2026 | 23/6/2026 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where WebLogic Server executes to compromise WebLogic… | |
| Modificada | Crítica (9.9) | 0.43% | — | Oracle Webcenter Portal | 17/6/2026 | 23/6/2026 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle WebCenter Portal. While the… | |
| Analizada | Crítica (10) | 0.51% | — | Oracle Webcenter Portal | 17/6/2026 | 23/6/2026 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal.… | |
| Analizada | Crítica (9.8) | 0.51% | — | Oracle Webcenter Portal | 17/6/2026 | 23/6/2026 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle WebCenter Portal.… | |
| Analizada | Crítica (9.9) | 0.43% | — | Oracle Webcenter Portal | 17/6/2026 | 23/6/2026 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle WebCenter Portal.… | |
| Analizada | Crítica (9.9) | 0.43% | — | Oracle Webcenter Portal | 17/6/2026 | 23/6/2026 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle WebCenter Portal.… | |
| Modificada | Crítica (9.9) | 0.43% | — | Oracle Enterprise Manager Base Platform | 17/6/2026 | 18/6/2026 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise… | |
| Analizada | Media (6) | 0.16% | — | Oracle VM Virtualbox | 17/6/2026 | 18/6/2026 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM… | |
| Analizada | Baja (3.2) | 0.17% | — | Oracle VM Virtualbox | 17/6/2026 | 18/6/2026 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM… | |
| Analizada | Baja (3.2) | 0.17% | — | Oracle VM Virtualbox | 17/6/2026 | 18/6/2026 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM… | |
| Analizada | Crítica (9.9) | 0.43% | — | Oracle Webcenter Portal | 17/6/2026 | 18/6/2026 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While… | |
| Analizada | Crítica (9.8) | 0.51% | — | Oracle Webcenter Content | 17/6/2026 | 17/6/2026 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content.… | |
| Analizada | Media (6.1) | 0.24% | — | Oracle Access Manager | 17/6/2026 | 17/6/2026 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager.… | |
| Analizada | Media (6.5) | 0.27% | — | Oracle Identity Manager | 17/6/2026 | 17/6/2026 | Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: End User Self Service). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Identity Manager. Successful… |