Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2743▼ 518 respecto a la semana anterior
Críticas / altas1293▼ 226 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
645 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.3) | 1.2% | — | Oracle Flexcube Private Banking | 27/1/2017 | 17/6/2026 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to… | |
| Modificada | Media (6.3) | 1.1% | — | Oracle Flexcube Universal Banking | 27/1/2017 | 17/6/2026 | Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via… | |
| Modificada | Alta (8.1) | 1.5% | — | Oracle Flexcube Private Banking | 27/1/2017 | 17/6/2026 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to… | |
| Modificada | Alta (8.1) | 1.5% | — | Oracle Flexcube Universal Banking | 27/1/2017 | 17/6/2026 | Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via… | |
| Modificada | Media (6.1) | 1.3% | — | Oracle Flexcube Private Banking | 27/1/2017 | 17/6/2026 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to… | |
| Modificada | Media (5.4) | 1.1% | — | Oracle Flexcube Private Banking | 27/1/2017 | 17/6/2026 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to… | |
| Modificada | Media (4.3) | 1.3% | — | Oracle Flexcube Private Banking | 27/1/2017 | 17/6/2026 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to… | |
| Modificada | Baja (3.1) | 1.1% | — | Oracle Flexcube Investor Servicing | 27/1/2017 | 17/6/2026 | Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to… | |
| Modificada | Media (6.1) | 1.4% | — | Roundcube Webmail | 20/12/2016 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message. | |
| Modificada | Alta (7.5) | 5.6% | 💥 PoC | Roundcube Webmail | 8/12/2016 | 17/6/2026 | steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is enabled, does not properly restrict the use of custom envelope-from addresses on the sendmail command line, which allows remote authenticated users to execute arbitrary code via a… | |
| Modificada | Media (6.1) | 1.7% | — | Oracle Flexcube Universal Banking | 25/10/2016 | 17/6/2026 | Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote attackers to affect confidentiality and integrity via vectors related to INFRA. | |
| Modificada | Media (4.3) | 1.4% | — | Oracle Flexcube Universal Banking | 25/10/2016 | 17/6/2026 | Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 and 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality via vectors related to INFRA, a different vulnerability than CVE-2016-5603. | |
| Modificada | Media (5.4) | 1.2% | — | Oracle Flexcube Universal Banking | 25/10/2016 | 17/6/2026 | Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to INFRA, a different vulnerability than… | |
| Modificada | Alta (8.1) | 1.7% | — | Oracle Flexcube Universal Banking | 25/10/2016 | 17/6/2026 | Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to INFRA, a different vulnerability than… | |
| Modificada | Alta (8.8) | 1.9% | — | Oracle Flexcube Universal Banking | 25/10/2016 | 17/6/2026 | Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to INFRA. | |
| Modificada | Media (4.3) | 1.6% | — | Oracle Flexcube Universal Banking | 25/10/2016 | 17/6/2026 | Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality via vectors related to INFRA, a different vulnerability than CVE-2016-5621. | |
| Modificada | Media (5) | 1.4% | — | Oracle Flexcube Universal Banking | 25/10/2016 | 17/6/2026 | Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality via vectors related to INFRA. | |
| Modificada | Media (5.4) | 1.2% | — | Oracle Flexcube Enterprise Limits AND Collateral Management | 25/10/2016 | 17/6/2026 | Unspecified vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component in Oracle Financial Services Applications 12.0.0 and 12.1.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. | |
| Modificada | Media (6.1) | 1.5% | — | Oracle Flexcube Enterprise Limits AND Collateral Management | 25/10/2016 | 17/6/2026 | Unspecified vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component in Oracle Financial Services Applications 12.0.0 and 12.1.0 allows remote attackers to affect confidentiality and integrity via vectors related to INFRA. | |
| Modificada | Media (5.4) | 1.2% | — | Oracle Flexcube Universal Banking | 25/10/2016 | 17/6/2026 | Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to INFRA. | |
| Modificada | Media (4.2) | 1.0% | — | Oracle Flexcube Private Banking | 25/10/2016 | 17/6/2026 | Unspecified vulnerability in the Oracle FLEXCUBE Private Banking component in Oracle Financial Services Applications 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. | |
| Modificada | Baja (3.3) | 0.37% | — | Oracle Flexcube Universal Banking | 25/10/2016 | 17/6/2026 | Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.4.0 allows local users to affect confidentiality via vectors related to INFRA. | |
| Modificada | Media (4.3) | 1.5% | — | Oracle Flexcube Universal Banking | 25/10/2016 | 17/6/2026 | Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 allows remote authenticated users to affect confidentiality via vectors related to INFRA. | |
| Modificada | Alta (8.8) | 2.7% | — | Opensuse LeapRoundcube Webmail | 25/8/2016 | 17/6/2026 | Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the authentication of users for requests that download attachments and cause a denial of service (disk consumption) via unspecified vectors. | |
| Modificada | Crítica (9.8) | 2.1% | — | Ec-cube Discount Coupon | 1/8/2016 | 17/6/2026 | SQL injection vulnerability in the Seed Coupon plugin before 1.6 for EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors. |