Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2811▼ 173 respecto a la semana anterior

Críticas / altas1356▲ 48 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)267▼ 256 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-13375	Aplazada	Crítica (9.8)	0.56%	—	IBM Common Cryptographic Architecture^AI	4/2/2026	17/6/2026	IBM Common Cryptographic Architecture (CCA) 7.5.52 and 8.4.82 could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system.
CVE-2024-49823	Analizada	Media (6.5)	0.38%	—	IBM Common Cryptographic Architecture	11/3/2025	17/6/2026	IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an authenticated user to cause a denial of service in the Hardware Security Module (HSM) using a specially crafted sequence of valid requests.
CVE-2024-41760	Analizada	Baja (3.7)	0.26%	—	IBM Common Cryptographic Architecture	11/3/2025	17/6/2026	IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an attacker to obtain sensitive information due to a timing attack during certain RSA operations.
CVE-2024-22340	Analizada	Media (6.5)	0.44%	—	IBM Common Cryptographic Architecture	11/3/2025	17/6/2026	IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow a remote attacker to obtain sensitive information during the creation of ECDSA signatures to perform a timing-based attack.
CVE-2023-47150	Analizada	Alta (7.5)	0.64%	—	IBM Common Cryptographic Architecture	26/3/2024	17/6/2026	IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 could allow a remote user to cause a denial of service due to incorrect data handling for certain types of AES operations. IBM X-Force ID: 270602.
CVE-2023-33855	Analizada	Baja (3.7)	0.45%	—	IBM Common Cryptographic Architecture	26/3/2024	17/6/2026	Under certain conditions, RSA operations performed by IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 may exhibit non-constant-time behavior. This could allow a remote attacker to obtain sensitive information using a timing-based attack. IBM X-Force ID: 257676.
CVE-2022-22423	Modificada	Media (5.5)	0.26%	—	IBM Common Cryptographic Architecture	23/9/2022	17/6/2026	IBM Common Cryptographic Architecture (CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769) could allow a local user to cause a denial of service due to improper input validation. IBM X-Force ID: 223596.