Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior
Críticas / altas1288▼ 199 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
29 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 1.1% | — | IBM Infosphere DatastageIBM Infosphere Information Server ON Cloud | 1/2/2017 | 17/6/2026 | IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to conduct clickjacking or other… | |
| Modificada | Media (5.4) | 0.72% | — | IBM Infosphere DatastageIBM Infosphere Information ServerIBM Infosphere Information Server ON Cloud | 1/2/2017 | 17/6/2026 | IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker to inject malicious CSS. | |
| Modificada | Alta (8.1) | 1.5% | — | IBM Infosphere DatastageIBM Infosphere Information ServerIBM Infosphere Information Server ON Cloud | 1/2/2017 | 17/6/2026 | IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. | |
| Modificada | Media (6.1) | 0.85% | — | IBM Infosphere Information ServerIBM Infosphere Information Server ON Cloud | 1/2/2017 | 17/6/2026 | IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to conduct clickjacking or… |