Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior
Críticas / altas1383▼ 38 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior
524 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.0% | — | Online Banking System Project Online Banking System | 23/9/2022 | 17/6/2026 | Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/delete_customer.php. | |
| Modificada | Crítica (9.8) | 1.1% | — | Online Banking System Project Online Banking System | 23/9/2022 | 17/6/2026 | Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/beneficiary.php. | |
| Modificada | Crítica (9.8) | 1.1% | — | Online Banking System Project Online Banking System | 23/9/2022 | 17/6/2026 | Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/delete_beneficiary.php. | |
| Modificada | Crítica (9.8) | 1.0% | — | Online Banking System Project Online Banking System | 23/9/2022 | 17/6/2026 | Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/edit_customer.php. | |
| Modificada | Crítica (9.8) | 1.0% | — | Online Banking System Project Online Banking System | 23/9/2022 | 17/6/2026 | Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/send_funds.php. | |
| Modificada | Media (6.4) | 0.57% | — | Oracle Banking Trade Finance | 19/7/2022 | 17/6/2026 | Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance.… | |
| Modificada | Media (6.7) | 0.66% | — | Oracle Banking Trade Finance | 19/7/2022 | 17/6/2026 | Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance.… | |
| Modificada | Media (6.4) | 0.66% | — | Oracle Banking Trade Finance | 19/7/2022 | 17/6/2026 | Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance.… | |
| Modificada | Media (6.4) | 0.61% | — | Oracle Banking Trade Finance | 19/7/2022 | 17/6/2026 | Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance.… | |
| Modificada | Media (6.7) | 0.66% | — | Oracle Banking Trade Finance | 19/7/2022 | 17/6/2026 | Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance.… | |
| Modificada | Media (5.9) | 0.55% | — | Oracle Banking Trade Finance | 19/7/2022 | 17/6/2026 | Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance.… | |
| Modificada | Media (6.4) | 0.66% | — | Oracle Flexcube Universal Banking | 19/7/2022 | 17/6/2026 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise… | |
| Modificada | Media (6.7) | 0.66% | — | Oracle Flexcube Universal Banking | 19/7/2022 | 17/6/2026 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise… | |
| Modificada | Media (6.4) | 0.66% | — | Oracle Flexcube Universal Banking | 19/7/2022 | 17/6/2026 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise… | |
| Modificada | Media (6.4) | 0.61% | — | Oracle Flexcube Universal Banking | 19/7/2022 | 17/6/2026 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise… | |
| Modificada | Alta (7.1) | 0.83% | — | Oracle Flexcube Universal Banking | 19/7/2022 | 17/6/2026 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise… | |
| Modificada | Media (6.7) | 0.70% | — | Oracle Flexcube Universal Banking | 19/7/2022 | 17/6/2026 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise… | |
| Modificada | Media (5.9) | 0.63% | — | Oracle Banking Payments | 19/4/2022 | 17/6/2026 | Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful… | |
| Modificada | Media (5.9) | 0.63% | — | Oracle Banking Trade Finance Process Management | 19/4/2022 | 17/6/2026 | Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance.… | |
| Modificada | Media (5.9) | 0.63% | — | Oracle Banking Treasury Management | 19/4/2022 | 17/6/2026 | Vulnerability in the Oracle Banking Treasury Management product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Treasury… | |
| Modificada | Media (5.9) | 0.63% | — | Oracle Flexcube Universal Banking | 19/4/2022 | 17/6/2026 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle… | |
| Analizada | Crítica (9.8) | 100% | ⚠ Explotación activa💥 Exploit | Wso2 API ManagerWso2 Enterprise IntegratorWso2 Identity ServerWso2 Identity Server Analytics+4 | 18/4/2022 | 17/6/2026 | Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a ../../../../repository/deployment/server/webapps directory. This affects… | |
| Modificada | Media (6.5) | 0.97% | — | Online Banking System Project Online Banking System | 8/4/2022 | 17/6/2026 | Online Banking System in PHP v1 was discovered to contain multiple SQL injection vulnerabilities at /staff_login.php via the Staff ID and Staff Password parameters. | |
| Modificada | Crítica (9.8) | 1.2% | — | Online Banking System Project Online Banking System | 5/4/2022 | 17/6/2026 | Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter. | |
| Analizada | Crítica (9.8) | 100% | ⚠ Explotación activa💥 Exploit | Vmware Spring Cloud FunctionOracle Banking BranchOracle Banking Cash ManagementOracle Banking Corporate Lending Process Management+24 | 1/4/2022 | 17/6/2026 | In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources. |