Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
115 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.4) | 0.87% | — | Yetiforce Customer Relationship Management | 22/8/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. | |
| Modificada | Media (5.4) | 0.49% | — | Yetiforce Customer Relationship Management | 22/8/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. | |
| Modificada | Media (4.8) | 0.47% | — | Yetiforce Customer Relationship Management | 21/8/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. | |
| Modificada | Media (6.1) | 0.76% | — | Yetiforce Customer Relationship Management | 5/5/2022 | 17/6/2026 | Unrestructed file upload in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Attacker can send malicious files to the victims is able to retrieve the stored data from the web application without that data being made safe to render in the browser and steals victim's cookie leads to account takeover. | |
| Modificada | Alta (8) | 0.53% | — | Yetiforce Customer Relationship Management | 24/1/2022 | 17/6/2026 | Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0. | |
| Modificada | Media (6.1) | 0.76% | — | Yetiforce Customer Relationship Management | 16/12/2021 | 17/6/2026 | yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | |
| Modificada | Media (4.3) | 0.71% | — | Yetiforce Customer Relationship Management | 15/12/2021 | 17/6/2026 | yetiforcecrm is vulnerable to Business Logic Errors | |
| Modificada | Media (5.4) | 0.46% | — | Yetiforce Customer Relationship Management | 15/12/2021 | 17/6/2026 | yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | |
| Modificada | Media (4.3) | 0.62% | — | Yetiforce Customer Relationship Management | 15/12/2021 | 17/6/2026 | yetiforcecrm is vulnerable to Business Logic Errors | |
| Modificada | Media (6.1) | 0.78% | — | Yetiforce Customer Relationship Management | 14/12/2021 | 17/6/2026 | yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | |
| Modificada | Media (4.3) | 0.40% | — | Yetiforce Customer Relationship Management | 11/12/2021 | 17/6/2026 | yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF) | |
| Modificada | Crítica (9.8) | 2.3% | — | Customer Relationship Management System Project Customer Relationship Management System | 3/11/2021 | 17/6/2026 | An SQL Injection vulnerability exists in Sourcecodester Customer Relationship Management System (CRM) 1.0 via the username parameter in customer/login.php. | |
| Modificada | Alta (8.8) | 1.1% | — | Customer Relationship Management System Project Customer Relationship Management System | 27/10/2021 | 17/6/2026 | A file upload vulnerability exists in Sourcecodester Customer Relationship Management System 1.0 via the account update option & customer create option, which could let a remote malicious user upload an arbitrary php file. . | |
| Modificada | Baja (3.3) | 0.25% | — | NCH Reflect Customer Relationship Management | 25/7/2021 | 17/6/2026 | NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files. | |
| Modificada | Alta (7.2) | 0.91% | — | SAP Customer Relationship Management | 14/7/2021 | 17/6/2026 | A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to compromise confidentiality, integrity, or availability of the system. | |
| Modificada | Alta (8.2) | 1.5% | — | Oracle Customer Relationship Management Technical Foundation | 21/10/2020 | 17/6/2026 | Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Flex Fields). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical… | |
| Modificada | Media (6.5) | 1.2% | — | Oracle Customer Relationship Management Technical Foundation | 21/10/2020 | 17/6/2026 | Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.2.3 - 12.2.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle CRM Technical Foundation.… | |
| Modificada | Alta (7.5) | 1.5% | — | Oracle Customer Relationship Management Technical Foundation | 21/10/2020 | 17/6/2026 | Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM… | |
| Modificada | Crítica (9.1) | 1.6% | — | Oracle Customer Relationship Management Gateway FOR Mobile Devices | 15/7/2020 | 17/6/2026 | Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobile Applications). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Gateway… | |
| Modificada | Crítica (9.1) | 1.6% | — | Oracle Customer Relationship Management Gateway FOR Mobile Devices | 15/7/2020 | 17/6/2026 | Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobile Applications). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Gateway… | |
| Modificada | Media (5.3) | 1.2% | — | Oracle Customer Relationship Management Technical Foundation | 15/4/2020 | 17/6/2026 | Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical… | |
| Modificada | Media (4.7) | 1.0% | — | Oracle Customer Relationship Management Technical Foundation | 15/4/2020 | 17/6/2026 | Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical… | |
| Modificada | Alta (8.2) | 1.3% | — | Oracle Customer Relationship Management Technical Foundation | 15/4/2020 | 17/6/2026 | Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation.… | |
| Modificada | Alta (8.6) | 1.7% | — | Oracle Customer Relationship Management Gateway FOR Mobile Devices | 15/4/2020 | 17/6/2026 | Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobile Applications). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Gateway… | |
| Modificada | Media (4.7) | 0.87% | — | Oracle Customer Relationship Management Technical Foundation | 15/1/2020 | 17/6/2026 | Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle CRM Technical… |