Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
315 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.0% | — | Siemens Opcenter QualitySiemens QMS Automotive | 22/4/2021 | 17/6/2026 | A vulnerability has been identified in Opcenter Quality (All versions < V12.2), QMS Automotive (All versions < V12.30). A private sign key is shipped with the product without adequate protection. | |
| Modificada | Media (5.4) | 0.62% | — | IBM Collaborative Lifecycle ManagementIBM Doors NextIBM Engineering InsightsIBM Engineering Lifecycle Management+8 | 12/4/2021 | 17/6/2026 | IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441. | |
| Modificada | Alta (7.5) | 0.72% | — | IBM Collaborative Lifecycle ManagementIBM Doors NextIBM Engineering InsightsIBM Engineering Lifecycle Management+8 | 12/4/2021 | 17/6/2026 | IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422. | |
| Modificada | Media (4.3) | 0.64% | — | IBM Collaborative Lifecycle ManagementIBM Doors NextIBM Engineering InsightsIBM Engineering Lifecycle Management+8 | 12/4/2021 | 17/6/2026 | IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419. | |
| Modificada | Media (5.4) | 0.62% | — | IBM Collaborative Lifecycle ManagementIBM Doors NextIBM Engineering InsightsIBM Engineering Lifecycle Management+8 | 12/4/2021 | 17/6/2026 | IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191396. | |
| Modificada | Media (5.4) | 0.50% | — | IBM Engineering InsightsIBM Engineering Lifecycle ManagementIBM Engineering Requirements Quality Assistant On-premisesIBM Engineering Workflow Management+2 | 30/3/2021 | 17/6/2026 | IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198572. | |
| Modificada | Media (5.4) | 0.50% | — | IBM Engineering InsightsIBM Engineering Lifecycle ManagementIBM Engineering Requirements Quality Assistant On-premisesIBM Engineering Workflow Management+2 | 30/3/2021 | 17/6/2026 | IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198437. | |
| Modificada | Media (5.4) | 0.50% | — | IBM Engineering InsightsIBM Engineering Lifecycle ManagementIBM Engineering Requirements Quality Assistant On-premisesIBM Engineering Workflow Management+2 | 30/3/2021 | 17/6/2026 | IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231. | |
| Modificada | Media (5.4) | 0.50% | — | IBM Engineering InsightsIBM Engineering Lifecycle ManagementIBM Engineering Requirements Quality Assistant On-premisesIBM Engineering Workflow Management+2 | 30/3/2021 | 17/6/2026 | IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231. | |
| Modificada | Media (5.4) | 0.50% | — | IBM Engineering InsightsIBM Engineering Lifecycle ManagementIBM Engineering Requirements Quality Assistant On-premisesIBM Engineering Workflow Management+2 | 30/3/2021 | 17/6/2026 | IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198182. | |
| Modificada | Alta (7.1) | 1.4% | — | IBM Engineering InsightsIBM Engineering Lifecycle ManagementIBM Engineering Requirements Quality Assistant On-premisesIBM Engineering Workflow Management+2 | 30/3/2021 | 17/6/2026 | IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 198059. | |
| Modificada | Media (5.4) | 0.50% | — | IBM Engineering InsightsIBM Engineering Lifecycle ManagementIBM Engineering Requirements Quality Assistant On-premisesIBM Engineering Workflow Management+2 | 30/3/2021 | 17/6/2026 | IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196623. | |
| Modificada | Media (5.4) | 0.50% | — | IBM Engineering InsightsIBM Engineering Lifecycle ManagementIBM Engineering Requirements Quality Assistant On-premisesIBM Engineering Workflow Management+2 | 30/3/2021 | 17/6/2026 | IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194710. | |
| Modificada | Media (5.4) | 0.60% | — | IBM Doors NextIBM Engineering Lifecycle ManagementIBM Engineering Requirements Quality Assistant On-premisesIBM Engineering Test Management+5 | 4/3/2021 | 17/6/2026 | IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194708. | |
| Modificada | Media (5.4) | 0.60% | — | IBM Doors NextIBM Engineering Lifecycle ManagementIBM Engineering Requirements Quality Assistant On-premisesIBM Engineering Test Management+5 | 4/3/2021 | 17/6/2026 | IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194707. | |
| Modificada | Media (5.4) | 0.60% | — | IBM Doors NextIBM Engineering Lifecycle ManagementIBM Engineering Requirements Quality Assistant On-premisesIBM Engineering Test Management+5 | 4/3/2021 | 17/6/2026 | IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194451. | |
| Modificada | Media (5.4) | 0.60% | — | IBM Doors NextIBM Engineering Lifecycle ManagementIBM Engineering Requirements Quality Assistant On-premisesIBM Engineering Test Management+5 | 4/3/2021 | 17/6/2026 | IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192435. | |
| Modificada | Media (5.4) | 0.60% | — | IBM Doors NextIBM Engineering Lifecycle ManagementIBM Engineering Requirements Quality Assistant On-premisesIBM Engineering Test Management+5 | 4/3/2021 | 17/6/2026 | IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190742. | |
| Modificada | Media (5.4) | 0.60% | — | IBM Doors NextIBM Engineering Lifecycle ManagementIBM Engineering Requirements Quality Assistant On-premisesIBM Engineering Test Management+5 | 4/3/2021 | 17/6/2026 | IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190566. | |
| Modificada | Media (5.4) | 0.73% | — | IBM Doors NextIBM Engineering Lifecycle ManagementIBM Engineering Requirements Quality Assistant On-premisesIBM Engineering Test Management+5 | 4/3/2021 | 17/6/2026 | IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190460. | |
| Modificada | Media (5.4) | 0.60% | — | IBM Doors NextIBM Engineering Lifecycle ManagementIBM Engineering Requirements Quality Assistant On-premisesIBM Engineering Test Management+5 | 4/3/2021 | 17/6/2026 | IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190459. | |
| Modificada | Media (5.4) | 0.66% | — | IBM Collaborative Lifecycle ManagementIBM Engineering InsightsIBM Engineering Lifecycle ManagementIBM Engineering Requirements Management Doors Next+7 | 27/1/2021 | 17/6/2026 | IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963. | |
| Modificada | Media (5.4) | 0.66% | — | IBM Collaborative Lifecycle ManagementIBM Engineering InsightsIBM Engineering Lifecycle ManagementIBM Engineering Requirements Management Doors Next+7 | 27/1/2021 | 17/6/2026 | IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190741. | |
| Modificada | Media (5.4) | 0.66% | — | IBM Collaborative Lifecycle ManagementIBM Engineering InsightsIBM Engineering Lifecycle ManagementIBM Engineering Requirements Management Doors Next+7 | 27/1/2021 | 17/6/2026 | IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190457. | |
| Modificada | Media (5.4) | 0.82% | — | IBM Collaborative Lifecycle ManagementIBM Engineering InsightsIBM Engineering Lifecycle ManagementIBM Engineering Requirements Management Doors Next+7 | 27/1/2021 | 17/6/2026 | IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID:… |