Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-43191	Analizada	Alta (8.8)	0.84%	—	IBM Cloud PAK FOR Multicloud Management Monitoring	26/9/2024	17/6/2026	IBM ManageIQ could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted yaml file request.
CVE-2023-46175	Analizada	Media (4.9)	0.34%	—	IBM Cloud PAK FOR Multicloud Management Monitoring	26/9/2024	17/6/2026	IBM Cloud Pak for Multicloud Management 2.3 through 2.3 FP8 stores user credentials in a log file plain clear text which can be read by a privileged user.
CVE-2022-42438	Modificada	Alta (8.8)	0.53%	—	IBM Cloud PAK FOR Multicloud Management Monitoring	8/2/2023	17/6/2026	IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin functions by specifying direct URL paths. IBM X-Force ID: 238210.
CVE-2021-38941	Modificada	Alta (8.1)	0.92%	—	IBM Cloud PAK FOR Multicloud Management Monitoring	30/6/2022	17/6/2026	IBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable to host information leakage or destruction if unauthorized access to these containers could execute arbitrary commands. IBM X-Force ID: 211048.
CVE-2021-20341	Modificada	Media (5.3)	1.1%	—	IBM Cloud PAK FOR Multicloud Management Monitoring	9/3/2021	17/6/2026	IBM Cloud Pak for Multicloud Management Monitoring 2.2 returns potentially sensitive information in headers which could lead to further attacks against the system. IBM X-Force ID: 194513.