Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2684▼ 86 respecto a la semana anterior
Críticas / altas1444▲ 301 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior
13 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (8.5) | 0.30% | — | Oracle Siebel Artificial Intelligence | 18/8/2026 | 4/9/2026 | Vulnerability in the Siebel Artificial Intelligence product of Oracle Siebel CRM (component: AI). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Artificial Intelligence. While the vulnerability is in… | |
| Analizada | Media (4.8) | 0.22% | — | Artificial Intelligence Project Artificial Intelligence | 10/7/2026 | 16/7/2026 | Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1. | |
| Analizada | Media (4.2) | 0.19% | — | Artificial Intelligence Project Artificial Intelligence | 10/7/2026 | 16/7/2026 | Missing Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1. | |
| Analizada | Baja (3.3) | 0.21% | — | Artificial Intelligence Project Artificial Intelligence | 10/7/2026 | 16/7/2026 | Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3. | |
| Analizada | Media (6.1) | 0.25% | — | Artificial Intelligence Project Artificial Intelligence | 10/7/2026 | 6/8/2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3. | |
| Analizada | Alta (7.5) | 0.39% | — | Artificial Intelligence Project Artificial Intelligence | 26/3/2026 | 17/6/2026 | Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.1.11, from 1.2.0 before 1.2.12. | |
| Analizada | Media (4.4) | 0.14% | — | Artificial Intelligence Project Artificial Intelligence | 28/1/2026 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.7, from 1.1.0 before 1.1.7, from 1.2.0 before 1.2.4. | |
| Aplazada | Media (6.5) | 0.33% | — | Ashish AI Tools Artificial Intelligence Auto Content GeneratorAI | 14/8/2025 | 17/6/2026 | Missing Authorization vulnerability in Ashish AI Tools artificial-intelligence-auto-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Tools: from n/a through <= 4.0.7. | |
| Analizada | Media (6.6) | 0.74% | — | Artificial Intelligence Project Artificial Intelligence | 31/3/2025 | 16/7/2026 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5. | |
| Analizada | Alta (7.5) | 0.76% | — | Artificial Intelligence Project Artificial Intelligence | 31/3/2025 | 16/7/2026 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5. | |
| Analizada | Alta (8.2) | 0.37% | — | Artificial Intelligence Project Artificial Intelligence | 31/3/2025 | 17/6/2026 | Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.3. | |
| Analizada | Alta (8.8) | 0.22% | — | Artificial Intelligence Project Artificial Intelligence | 31/3/2025 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal AI (Artificial Intelligence) allows Cross Site Request Forgery.This issue affects AI (Artificial Intelligence): from 1.0.0 before 1.0.2. | |
| Modificada | Media (6.1) | 0.98% | — | Artificial Intelligence Project Artificial Intelligence | 22/10/2019 | 17/6/2026 | The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons HTML files are unnecessarily placed under the web root. |