Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2715▼ 529 respecto a la semana anterior

Críticas / altas1290▼ 220 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior

384 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2012-4837	Modificada	Media (4)	1.1%	—	IBM Cognos Business Intelligence	5/3/2013	16/6/2026	IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors.
CVE-2012-4836	Modificada	Baja (3.5)	0.94%	—	IBM Cognos Business Intelligence	5/3/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is not properly handled during rendering of stored data.
CVE-2012-4835	Modificada	Media (4.3)	1.1%	—	IBM Cognos Business Intelligence	5/3/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-2193	Modificada	Media (4.3)	1.1%	—	IBM Cognos Business Intelligence	5/3/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in Query Studio in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows user-assisted remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-2177	Modificada	Media (4.3)	1.1%	—	IBM Cognos Business Intelligence	5/3/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors related to the search feature.
CVE-2012-4847	Modificada	Media (4)	0.97%	—	IBM Cognos Business Intelligence	14/11/2012	16/6/2026	IBM Cognos Business Intelligence (BI) 8.4 and 8.4.1 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted request containing a zero-valued byte.
CVE-2011-0486	Modificada	Media (4.3)	1.3%	—	IBM Cognos 8 Business Intelligence	18/1/2011	16/6/2026	Cross-site scripting (XSS) vulnerability in cognos.cgi in IBM Cognos 8 Business Intelligence (BI) 8.4.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via the pathinfo parameter.
CVE-2010-1490	Modificada	Alta (10)	1.5%	—	IBM Cognos 8 Business Intelligence	21/4/2010	16/6/2026	Unspecified vulnerability in IBM Cognos 8 Business Intelligence before 8.4.1 FP1 has unknown impact and attack vectors.
CVE-2006-5675	Modificada	Alta (10)	1.5%	💥 Exploit	Pentaho Business Intelligence Suite	3/11/2006	16/6/2026	Multiple unspecified vulnerabilities in Pentaho Business Intelligence (BI) Suite before 1.2 RC3 (1.2.0.470-RC3) have unknown impact and attack vectors, related to "MySQL Scripts need changes for security," possibly SQL injection vulnerabilities associated with these scripts.