Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-1885	Modificada	Media (5.3)	1.8%	—	IBM Business Automation Workflow IBM Business Process Manager IBM Business Process Manager Enterprise Service BUS IBM Websphere Enterprise Service BUS	8/4/2019	17/6/2026	IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. IBM X-Force ID: 152020.
CVE-2018-1384	Modificada	Media (5.4)	1.0%	—	IBM Business Process Manager IBM Websphere Enterprise Service BUS IBM Websphere Process Server IBM Business Process Manager Enterprise Service BUS	30/3/2018	17/6/2026	IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138135.
CVE-2017-1765	Modificada	Media (4.3)	1.4%	—	IBM Business Process Manager IBM Business Process Manager Enterprise Service BUS	30/3/2018	17/6/2026	IBM Business Process Manager 8.6 could allow an authenticated user with special privileges to reveal sensitive information about the application server. IBM X-Force ID: 136150.
CVE-2017-1756	Modificada	Baja (3.3)	0.38%	—	IBM Business Process Manager IBM Business Process Manager Enterprise Service BUS IBM Websphere	30/3/2018	17/6/2026	IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856.