Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2685▼ 177 respecto a la semana anterior
Críticas / altas1223▼ 305 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 1 respecto a la semana anterior
Sin puntuar (sin CVSS)233▲ 186 respecto a la semana anterior
5112 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Baja (2.7) | 0.27% | — | Oracle Database Server | 21/10/2025 | 8/10/2026 | Vulnerabilidad en el componente de Auditoría Unificada de Oracle Database Server. Versiones compatibles que están afectadas son 23.4-23.9. Vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios que tiene privilegio DBA con acceso a la red a través de Oracle Net comprometer Auditoría… | |
| Analizada | Baja (2.7) | 0.30% | — | Oracle Database Server | 21/10/2025 | 8/10/2026 | Vulnerabilidad en el componente de índice funcional RDBMS del servidor de base de datos Oracle. Las versiones compatibles que están afectadas son 23.4-23.9. La vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios que tiene el privilegio SYSDBA con acceso a la red a través de Oracle Net… | |
| Analizada | Media (5.8) | 0.32% | — | Oracle Database Server | 21/10/2025 | 8/10/2026 | Vulnerabilidad en el componente Portable Clusterware de Oracle Database Server. Las versiones compatibles que están afectadas son 19.3-19.28, 21.3-21.19 y 23.4-23.9. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de Bonjour comprometer Portable Clusterware.… | |
| Analizada | Alta (8.3) | 0.51% | — | Atlassian Confluence Data CenterAtlassian Confluence Server | 21/10/2025 | 8/10/2026 | Esta vulnerabilidad DoS (denegación de servicio) de alta gravedad fue introducida en la versión 2.0 de Confluence Data Center. Esta vulnerabilidad DoS (denegación de servicio), con una puntuación CVSS de 8.3, permite a un atacante causar que un recurso no esté disponible para sus usuarios previstos al interrumpir… | |
| Analizada | Alta (8.7) | 0.51% | — | Dataease | 17/10/2025 | 17/6/2026 | DataEase is an open source data visualization and analytics platform. In versions 2.10.13 and earlier, the /de2api/datasetData/tableField interface is vulnerable to SQL injection. An attacker can construct a malicious tableName parameter to execute arbitrary SQL commands. This issue is fixed in version 2.10.14. No… | |
| Analizada | Media (5.5) | 0.27% | — | Dataease | 17/10/2025 | 17/6/2026 | DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a stored cross-site scripting vulnerability exists due to improper file upload validation and authentication bypass. The StaticResourceApi interface defines a route upload/{fileId} that uses a URL path parameter where both… | |
| Analizada | Alta (8.2) | 1.0% | — | Dataease | 17/10/2025 | 17/6/2026 | DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC driver bypass vulnerability exists in the H2 database connection handler. The getJdbc function in H2.java checks if the jdbcUrl starts with jdbc:h2 but returns a separate jdbc field as the actual connection URL. An… | |
| Analizada | Alta (8.2) | 0.43% | — | Dataease | 17/10/2025 | 17/6/2026 | DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC URL injection vulnerability exists in the DB2 and MongoDB data source configuration handlers. In the DB2 data source handler, when the extraParams field is empty, the HOSTNAME, PORT, and DATABASE values are directly… | |
| Analizada | Media (6.5) | 0.56% | — | Wso2 API Control PlaneWso2 API ManagerWso2 API Manager AnalyticsWso2 Data Analytics Server+11 | 16/10/2025 | 25/9/2026 | Una vulnerabilidad de control de acceso inadecuado existe en múltiples productos WSO2 debido a una aplicación de permisos insuficiente en ciertos servicios SOAP Admin internos y API REST del sistema. Un usuario con bajos privilegios puede explotar esta falla para realizar operaciones no autorizadas, incluyendo el… | |
| Analizada | Alta (7.4) | 0.19% | — | Amazon Opensearch Data Prepper | 15/10/2025 | 8/10/2026 | OpenSearch Data Prepper como un recolector de datos de código abierto para datos de observabilidad. En versiones anteriores a la 2.12.2, los plugins de sink y source de OpenSearch en Data Prepper confían en todos los certificados SSL por defecto cuando no se proporciona una ruta de certificado. Antes de esta… | |
| Aplazada | Alta (8.6) | 0.58% | — | Ragic Enterprise Cloud DatabaseAI | 13/10/2025 | 8/10/2026 | La Base de datos en la nube empresarial desarrollada por Ragic tiene una vulnerabilidad de carga de archivos arbitraria, lo que permite a atacantes remotos privilegiados cargar y ejecutar puertas traseras web shell, posibilitando así la ejecución de código arbitrario en el servidor. | |
| Analizada | Media (4.4) | 0.13% | — | Dell Data Domain Operating System | 7/10/2025 | 17/6/2026 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain a Stack-based Buffer Overflow vulnerability… | |
| Analizada | Alta (7.5) | 0.36% | — | Dell Data Domain Operating System | 7/10/2025 | 17/6/2026 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an incorrect Implementation of Authentication Algorithm vulnerability in the… | |
| Analizada | Media (6.7) | 0.47% | — | Dell Data Domain Operating System | 7/10/2025 | 17/6/2026 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS… | |
| Analizada | Media (6.7) | 0.60% | — | Dell Data Domain Operating System | 7/10/2025 | 17/6/2026 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS… | |
| Analizada | Media (6.7) | 0.60% | — | Dell Data Domain Operating System | 7/10/2025 | 17/6/2026 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS… | |
| Analizada | Media (6.7) | 0.21% | — | Dell Data Domain Operating System | 7/10/2025 | 17/6/2026 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Argument Delimiters in a Command ('Argument… | |
| Analizada | Media (4.4) | 0.13% | — | Dell Data Domain Operating System | 7/10/2025 | 17/6/2026 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain a Stack-based Buffer Overflow vulnerability.… | |
| Analizada | Media (6) | 0.17% | — | Dell Data Domain Operating System | 7/10/2025 | 17/6/2026 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Limitation of a Pathname to a… | |
| Analizada | Media (6.5) | 0.17% | — | Dell Data Domain Operating System | 7/10/2025 | 17/6/2026 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Use of a Broken or Risky Cryptographic… | |
| Analizada | Alta (7.5) | 0.36% | — | Dell Data Domain Operating System | 7/10/2025 | 17/6/2026 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain a Heap-based Buffer Overflow vulnerability.… | |
| Analizada | Alta (7.5) | 0.16% | — | Dell Data Domain Operating System | 7/10/2025 | 17/6/2026 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Use of a Broken or Risky Cryptographic… | |
| Analizada | Media (6.7) | 0.38% | — | Dell Data Domain Operating System | 7/10/2025 | 17/6/2026 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralization of Special… | |
| Analizada | Media (6.5) | 0.39% | — | Dell Data Domain Operating System | 7/10/2025 | 17/6/2026 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain a Path Traversal: '.../...//' vulnerability.… | |
| Analizada | Media (6.5) | 0.33% | — | Dell Data Domain Operating System | 7/10/2025 | 17/6/2026 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralization of Argument… |