Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2624▼ 236 respecto a la semana anterior

Críticas / altas1384▲ 151 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-30889	Modificada	Media (5.4)	0.48%	—	Web-audimex Audimexee	4/6/2024	17/6/2026	Cross Site Scripting vulnerability in audimex audimexEE v.15.1.2 and fixed in 15.1.3.9 allows a remote attacker to execute arbitrary code via the service, method, widget_type, request_id, payload parameters.
CVE-2023-36361	Modificada	Crítica (9.8)	0.78%	—	Web-audimex Audimexee	5/9/2023	9/7/2026	Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the p_table_name parameter.
CVE-2023-39559	Modificada	Media (5.3)	0.70%	—	Web-audimex Audimexee	29/8/2023	17/6/2026	AudimexEE 15.0 was discovered to contain a full path disclosure vulnerability.
CVE-2023-39558	Modificada	Media (6.1)	0.48%	—	Web-audimex Audimexee	29/8/2023	17/6/2026	AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the Show Kai Data component.
CVE-2020-28115	Modificada	Alta (8.8)	0.95%	—	Web-audimex Audimexee	5/11/2020	17/6/2026	SQL Injection vulnerability in "Documents component" found in AudimexEE version 14.1.0 allows an attacker to execute arbitrary SQL commands via the object_path parameter.
CVE-2020-28047	Modificada	Media (5.4)	0.84%	—	Web-audimex Audimexee	5/11/2020	17/6/2026	AudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cross-Site-Scripting). If the recommended security configuration parameter "unique_error_numbers" is not set, remote attackers can inject arbitrary web script or HTML via 'action, cargo, panel' parameters that can lead to data leakage.