Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2565▼ 302 respecto a la semana anterior

Críticas / altas1351▲ 99 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

13 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-53793	Analizada	Alta (7.5)	1.3%	—	Microsoft Azure Stack HUB	12/8/2025	17/6/2026	Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.
CVE-2024-38220	Analizada	Crítica (9)	1.0%	—	Microsoft Azure Stack HUB	10/9/2024	10/8/2026	Azure Stack Hub Elevation of Privilege Vulnerability
CVE-2024-38216	Analizada	Crítica (9)	0.92%	—	Microsoft Azure Stack HUB	10/9/2024	10/8/2026	Azure Stack Hub Elevation of Privilege Vulnerability
CVE-2024-38201	Analizada	Alta (7)	0.65%	—	Microsoft Azure Stack HUB	13/8/2024	17/6/2026	Azure Stack Hub Elevation of Privilege Vulnerability
CVE-2024-38108	Analizada	Crítica (9.3)	1.2%	—	Microsoft Azure Stack HUB	13/8/2024	17/6/2026	Azure Stack Hub Spoofing Vulnerability
CVE-2024-20679	Modificada	Media (6.5)	1.3%	—	Microsoft Azure Stack HUB	13/2/2024	10/8/2026	Azure Stack Hub Spoofing Vulnerability
CVE-2022-29149	Modificada	Alta (7.8)	0.92%	—	Microsoft Azure Automation State Configuration Microsoft Azure Automation Update Management Microsoft Azure Diagnostics Microsoft Azure Security Center+6	15/6/2022	17/6/2026	Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
CVE-2021-36302	Modificada	Crítica (9.9)	0.93%	—	Dell EMC Integrated System FOR Microsoft Azure Stack HUB Firmware	9/2/2022	17/6/2026	All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability. A remote malicious user with standard level JEA credentials may potentially exploit this vulnerability to elevate privileges and take over the system.
CVE-2021-38649	Analizada	Alta (7.8)	2.9%	⚠ Explotación activa	Microsoft Azure Automation State Configuration Microsoft Azure Automation Update Management Microsoft Azure Diagnostics (lad)Microsoft Azure Open Management Infrastructure+7	15/9/2021	10/8/2026	Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38648	Analizada	Alta (7.8)	11%	⚠ Explotación activa	Microsoft Azure Automation State Configuration Microsoft Azure Automation Update Management Microsoft Azure Diagnostics (lad)Microsoft Azure Open Management Infrastructure+7	15/9/2021	10/8/2026	Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38647	Analizada	Crítica (9.8)	100%	⚠ Explotación activa	Microsoft Azure Automation State Configuration Microsoft Azure Automation Update Management Microsoft Azure Diagnostics (lad)Microsoft Azure Security Center+6	15/9/2021	10/8/2026	Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
CVE-2021-38645	Analizada	Alta (7.8)	2.7%	⚠ Explotación activa	Microsoft Azure Automation State Configuration Microsoft Azure Automation Update Management Microsoft Azure Diagnostics (lad)Microsoft Azure Security Center+6	15/9/2021	10/8/2026	Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-21505	Modificada	Crítica (9.8)	2.4%	—	Dell EMC Integrated System FOR Microsoft Azure Stack HUB Firmware	6/5/2021	17/6/2026	Dell EMC Integrated System for Microsoft Azure Stack Hub, versions 1906 – 2011, contain an undocumented default iDRAC account. A remote unauthenticated attacker, with the knowledge of the default credentials, could potentially exploit this to log in to the system to gain root privileges.