Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior
Críticas / altas1383▼ 38 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior
153 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Contacts.jsp" has reflected XSS via the ConnPoolName parameter. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/AdminAuthorisationFrame.jsp" has reflected XSS via the ConnPoolName or GroupId parameter. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/categorytree/ChooseCategory.jsp" has reflected XSS via the ConnPoolName parameter. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/UserPopupAddNewProp.jsp" has reflected XSS via the ConnPoolName parameter. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Subscriptions.jsp" has reflected XSS via the ConnPoolName or GroupId parameter. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Subscribers.jsp" has reflected XSS via the ConnPoolName or GroupId parameter. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SubFolderPackages.jsp" has reflected XSS via the GroupId parameter. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Import.jsp" has reflected XSS via the ConnPoolName parameter. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/GroupMove.jsp" has reflected XSS via the ConnPoolName, GroupId, or type parameter. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/GroupCopy.jsp" has reflected XSS via the ConnPoolName, GroupId, or type parameter. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Variables.jsp" has reflected XSS via the ConnPoolName and GroupId parameters. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the GroupId and ConnPoolName parameters. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentUser.jsp" has reflected XSS via the GroupId and ConnPoolName parameters. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPool.jsp" has reflected XSS via the PropName parameter. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Users.jsp" has reflected XSS via the ConnPoolName parameter. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "UserProperties.jsp" has reflected XSS via the ConnPoolName parameter. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "SubPagePackages.jsp" has reflected XSS via the ConnPoolName and GroupId parameters. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the ConnPoolName and GroupId parameters. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "GroupRessourceAdmin.jsp" has reflected XSS via the ConnPoolName parameter. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters. | |
| Modificada | Media (6.1) | 1.1% | — | Infovista Vistaportal | 17/12/2018 | 17/6/2026 | XSS exists in InfoVista VistaPortal SE Version 5.1 (build 51029). VPortal/mgtconsole/RolePermissions.jsp has reflected XSS via the ConnPoolName parameter. | |
| Modificada | Media (5.4) | 0.66% | — | IBM Datapower Gateway | 13/12/2018 | 17/6/2026 | IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 through 7.7.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality… | |
| Modificada | Alta (7.5) | 0.97% | — | IBM Datapower Gateway | 13/12/2018 | 17/6/2026 | IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 through 7.7.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 144891. | |
| Modificada | Media (5.5) | 0.37% | — | IBM Datapower GatewayIBM MQ Appliance | 11/12/2018 | 17/6/2026 | IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5.1.9, 7.5.2.0 through 7.5.2.9, and 7.6.0.0 through 7.6.0.2 and IBM MQ Appliance 8.0.0.0 through 8.0.0.8 and 9.0.1 through 9.0.5 could allow a local user to cause a denial of service through unknown… |