Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2019-10463	Modificada	Media (6.5)	0.84%	—	Jenkins Dynatrace Application Monitoring	23/10/2019	17/6/2026	A missing permission check in Jenkins Dynatrace Application Monitoring Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
CVE-2019-10462	Modificada	Alta (8.1)	0.70%	—	Jenkins Dynatrace Application Monitoring	23/10/2019	17/6/2026	A cross-site request forgery vulnerability in Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials.
CVE-2019-10461	Modificada	Alta (7.8)	0.33%	—	Jenkins Dynatrace Application Monitoring	23/10/2019	17/6/2026	Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
CVE-2019-3800	Modificada	Alta (7.8)	2.1%	—	Pivotal Cloud Foundry Command Line Interface Pivotal Cloud Foundry Command Line Interface Release Pivotal Cloud Foundry Deployment Pivotal Cloud Foundry Deployment Concourse Tasks+51	5/8/2019	17/6/2026	CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.