Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2647▼ 688 respecto a la semana anterior
Críticas / altas1257▼ 290 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)226▼ 277 respecto a la semana anterior
557 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5) | 1.7% | — | BEA Weblogic Server | 20/10/2000 | 16/6/2026 | BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the FileServlet. | |
| Modificada | Alta (10) | 12% | 💥 Exploit | BEA Weblogic Server | 20/10/2000 | 16/6/2026 | BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file. | |
| Modificada | Alta (10) | 12% | 💥 Exploit | BEA Weblogic Server | 20/10/2000 | 16/6/2026 | BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file. | |
| Modificada | Media (5) | 1.6% | — | BEA Weblogic Server | 20/10/2000 | 16/6/2026 | BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, which invokes the SSIServlet. | |
| Modificada | Alta (10) | 51% | — | BEA Weblogic Server | 20/10/2000 | 16/6/2026 | Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension. | |
| Modificada | Media (5) | 4.6% | 💥 Exploit | BEA Weblogic Server | 21/6/2000 | 16/6/2026 | The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing. | |
| Modificada | Alta (7.5) | 2.5% | — | BEA Weblogic Server | 8/6/2000 | 16/6/2026 | The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. |