Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3005▼ 85 respecto a la semana anterior
Críticas / altas1403▲ 41 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.1) | 1.4% | — | Microsoft Azure Active Directory ConnectMicrosoft Azure Active Directory Connect Provisioning Agent | 12/8/2021 | 10/8/2026 | Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability | |
| Modificada | Media (5.3) | 1.8% | — | Microsoft Azure Active Directory Connect | 16/5/2019 | 17/6/2026 | An elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect build 1.3.20.0, which allows an attacker to execute two PowerShell cmdlets in context of a privileged account, and perform privileged actions.To exploit this, an attacker would need to authenticate to the Azure AD Connect… | |
| Modificada | Alta (8.1) | 3.6% | — | Microsoft Azure Active Directory Connect | 29/6/2017 | 17/6/2026 | Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka "Azure AD Connect Elevation of Privilege Vulnerability." |