Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2989▼ 87 respecto a la semana anterior

Críticas / altas1458▲ 97 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

58 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2013-1214	Modificada	Media (5)	1.2%	—	Cisco Unified Contact Center Express Editor Software	24/4/2013	16/6/2026	The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546.
CVE-2011-2583	Modificada	Media (5)	2.3%	—	Cisco Unified Contact Center Express	2/5/2012	16/6/2026	Cisco Unified Contact Center Express (aka CCX) 8.0 and 8.5 allows remote attackers to cause a denial of service via network traffic, as demonstrated by an SEC-BE-STABLE test case, aka Bug ID CSCth33834.
CVE-2011-1229	Modificada	Alta (7.2)	1.5%	—	Microsoft Windows 2003 Server Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008+31	13/4/2011	16/6/2026	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different…
CVE-2010-1571	Modificada	Alta (7.8)	2.9%	—	Cisco Unified Contact Center Express Cisco Customer Response Solution Cisco Unified IP Interactive Voice Response	10/6/2010	16/6/2026	Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP port 6295.
CVE-2010-1570	Modificada	Alta (7.8)	2.5%	—	Cisco Unified Contact Center Express Cisco Customer Response Solution Cisco Unified IP Interactive Voice Response	10/6/2010	16/6/2026	The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote attackers to cause a denial of service (CTI server and Node Manager failure) via a malformed CTI message.
CVE-2009-2048	Modificada	Baja (3.5)	1.0%	—	Cisco CRS Cisco Customer Response Applications Cisco IP QM Cisco Unified CCX+2	16/7/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified vectors.
CVE-2009-2047	Modificada	Alta (9)	2.4%	—	Cisco CRS Cisco Customer Response Applications Cisco IP QM Cisco Unified CCX+2	16/7/2009	16/6/2026	Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to read, modify, or delete arbitrary files via unspecified vectors.
CVE-2005-0356	Modificada	Media (5)	83%	💥 Exploit	Cisco Agent Desktop Cisco E-mail Manager Cisco Emergency Responder Cisco Intelligent Contact Manager+72	31/5/2005	16/6/2026	Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.