Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

30 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-38975	Modificada	Media (6.5)	0.97%	—	IBM Security Guardium KEY Lifecycle Manager IBM Security KEY Lifecycle Manager	15/11/2021	17/6/2026	IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to to obtain sensitive information from a specially crafted HTTP request. IBM X-Force ID: 212780.
CVE-2021-38974	Modificada	Media (6.5)	1.0%	—	IBM Security Guardium KEY Lifecycle Manager IBM Security KEY Lifecycle Manager	15/11/2021	17/6/2026	IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to cause a denial of service using specially crafted HTTP requests. IBM X-Force ID: 212779.
CVE-2021-38985	Modificada	Media (4.3)	0.63%	—	IBM Security Guardium KEY Lifecycle Manager IBM Security KEY Lifecycle Manager	12/11/2021	17/6/2026	IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CVE-2021-38973	Modificada	Baja (2.7)	0.59%	—	IBM Security Guardium KEY Lifecycle Manager IBM Security KEY Lifecycle Manager	12/11/2021	17/6/2026	IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CVE-2021-38972	Modificada	Media (4.3)	0.63%	—	IBM Security Guardium KEY Lifecycle Manager IBM Security KEY Lifecycle Manager	12/11/2021	17/6/2026	IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.