Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2720▼ 598 respecto a la semana anterior
Críticas / altas1299▼ 202 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
79 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (10) | 2.8% | — | IBM Security Access Manager FOR WEB 7.0 FirmwareIBM Security Access Manager FOR WEB ApplianceIBM Security Access Manager FOR WEB 8.0 FirmwareIBM Security Access Manager FOR Mobile 8.0 Firmware+1 | 3/10/2014 | 17/6/2026 | The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before 8.0.0-ISS-ISAM-FP0005, allows remote attackers to inject system commands via unspecified vectors. | |
| Modificada | Alta (10) | 4.2% | — | IBM Security Access Manager FOR Mobile SoftwareIBM Security Access Manager FOR WEB SoftwareIBM Security Access Manager FOR Mobile ApplianceIBM Security Access Manager FOR WEB Appliance | 21/6/2014 | 17/6/2026 | Unspecified vulnerability in IBM Security Access Manager (ISAM) for Mobile 8.0 and IBM Security Access Manager for Web 7.0 and 8.0 allows remote attackers to execute arbitrary code via unknown vectors. | |
| Modificada | Alta (8) | 1.4% | — | IBM Security Access Manager FOR WEB 8.0 FirmwareIBM Security Access Manager FOR WEB ApplianceIBM Security Access Manager FOR Mobile SoftwareIBM Security Access Manager FOR WEB Software+1 | 21/6/2014 | 17/6/2026 | The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware 8.0.0.2 and 8.0.0.3, allows remote attackers to bypass authentication via a login action with invalid credentials. | |
| Modificada | Media (6.5) | 1.4% | — | Oracle E-business SuiteOracle Mobile Application Server | 15/7/2008 | 16/6/2026 | Unspecified vulnerability in the Mobile Application Server component in Oracle E-Business Suite 12.0.3 has unknown impact and remote authenticated attack vectors. |