Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior
Críticas / altas1389▼ 28 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior
55 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 1.4% | — | Acquia MauticMautic | 3/1/2018 | 17/6/2026 | Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to. | |
| Modificada | Alta (8.1) | 1.1% | — | Acquia MauticMautic | 3/1/2018 | 17/6/2026 | Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address | |
| Modificada | Media (6.1) | 0.84% | — | Acquia MauticMautic | 3/1/2018 | 17/6/2026 | Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters to pre-populate the form. | |
| Modificada | Alta (7.5) | 1.1% | — | Mautic | 17/7/2017 | 17/6/2026 | Mautic 2.6.1 and earlier fails to set flags on session cookies | |
| Modificada | Alta (8.8) | 0.76% | — | Acquia Mautic | 10/5/2017 | 17/6/2026 | Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that (1) delete email campaigns or (2) delete contacts. |