Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

32 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-9026	Modificada	Alta (7.5)	1.3%	—	Broadcom Privileged Access Manager	18/6/2018	17/6/2026	A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request.
CVE-2018-9025	Modificada	Alta (7.5)	1.4%	—	Broadcom Privileged Access Manager	18/6/2018	17/6/2026	An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input.
CVE-2018-9024	Modificada	Media (5.3)	1.1%	—	Broadcom Privileged Access Manager	18/6/2018	17/6/2026	An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file.
CVE-2018-9023	Modificada	Alta (8.8)	1.9%	—	Broadcom Privileged Access Manager	18/6/2018	17/6/2026	An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update_crld script.
CVE-2018-9022	Modificada	Crítica (9.8)	13%	💥 Exploit	Broadcom Privileged Access Manager	18/6/2018	17/6/2026	An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands by poisoning a configuration file.
CVE-2018-9021	Modificada	Crítica (9.8)	9.6%	💥 Exploit	Broadcom Privileged Access Manager	18/6/2018	17/6/2026	An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with specially crafted requests.
CVE-2015-4664	Modificada	Crítica (9.8)	21%	💥 Exploit	Broadcom Privileged Access Manager Xceedium Xsuite	18/6/2018	17/6/2026	An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands.