Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2567▼ 296 respecto a la semana anterior

Críticas / altas1351▲ 100 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-27244	Aplazada	Media (5.9)	0.47%	—	Assetview Cloud^AI Hammock Assetview^AI	2/4/2025	17/6/2026	AssetView and AssetView CLOUD contain an issue with acquiring sensitive information from sent data to the developer. If exploited, sensitive information may be obtained by a remote unauthenticated attacker.
CVE-2025-25060	Aplazada	Alta (8.2)	0.51%	—	Assetview Cloud^AI Hammock Assetview^AI	2/4/2025	17/6/2026	Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server where the product is running may be obtained and/or deleted by a remote unauthenticated attacker.
CVE-2022-28719	Modificada	Crítica (9.8)	4.7%	—	Hammock Assetview	28/4/2022	17/6/2026	Missing authentication for critical function in AssetView prior to Ver.13.2.0 allows a remote unauthenticated attacker with some knowledge on the system configuration to upload a crafted configuration file to the managing server, which may result in the managed clients to execute arbitrary code with the administrative…
CVE-2017-2241	Modificada	Media (6.3)	0.73%	—	Hammock Assetview	17/7/2017	17/6/2026	SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service".
CVE-2017-2240	Modificada	Media (6.5)	1.6%	—	Hammock Assetview	17/7/2017	17/6/2026	Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via "File Transfer Web Service".