Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 302 respecto a la semana anterior

Críticas / altas1389▼ 21 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-64710	Aplazada	Media (5.3)	0.32%	—	Bitplatform Boilerplate^AI Microsoft Visual Studio^AI Microsoft NET^AI	13/11/2025	17/6/2026	Bitplatform Boilerplate is a Visual studio and .NET project template. Versions prior to 9.11.3 are affected by a cross-site scripting (XSS) vulnerability in the WebInteropApp/WebAppInterop, potentially allowing attackers to inject malicious scripts that compromise the security and integrity of web applications.…
CVE-2025-42907	Aplazada	Media (4.3)	0.22%	—	SAP BI Platform^AI	23/9/2025	17/6/2026	SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system.
CVE-2019-0262	Modificada	Media (5.4)	0.89%	—	SAP Businessobjects BI Platform	15/2/2019	17/6/2026	SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user-controlled inputs in generated HTML reports, resulting in Cross-Site Scripting (XSS) vulnerability.
CVE-2018-2479	Modificada	Media (6.1)	1.3%	—	SAP Businessobjects BI Platform	13/11/2018	17/6/2026	SAP BusinessObjects Business Intelligence Platform (BIWorkspace), versions 4.1 and 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVE-2018-2472	Modificada	Media (6.1)	1.3%	—	SAP Businessobjects BI Platform	9/10/2018	17/6/2026	SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 (Web Intelligence DHTML client) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVE-2018-2467	Modificada	Media (5.3)	1.4%	—	SAP Businessobjects BI Platform	9/10/2018	17/6/2026	In the Software Development Kit in SAP BusinessObjects BI Platform Servers, versions 4.1 and 4.2, using the specially crafted URL in a Web Browser such as Chrome the system returns an error with the path of the used application server.