Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2568▼ 306 respecto a la semana anterior

Críticas / altas1351▲ 96 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-46785	Modificada	Media (6.1)	0.40%	—	Squaredup Dashboard Server	23/2/2023	17/6/2026	SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2).
CVE-2022-46784	Modificada	Media (6.1)	0.37%	—	Squaredup Dashboard Server	23/2/2023	17/6/2026	SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection. (The issue was originally found in 5.5.1 GA.)
CVE-2022-46786	Modificada	Media (5.4)	0.39%	—	Squaredup Dashboard Server	23/2/2023	17/6/2026	SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2).
CVE-2019-6516	Modificada	Media (5.8)	1.6%	—	Wso2 Dashboard Server	14/5/2019	17/6/2026	An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to force the application to perform requests to the internal workstation (port-scanning) and to perform requests to adjacent workstations (network-scanning), aka SSRF.
CVE-2019-6514	Modificada	Media (4.8)	1.0%	—	Wso2 Dashboard Server	14/5/2019	17/6/2026	An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to inject a JavaScript payload that will be stored in the database and then displayed and executed on the same page, aka XSS.
CVE-2017-14995	Modificada	Media (6.1)	0.64%	—	Wso2 Application Server Wso2 Business Process Server Wso2 Business Rules Server Wso2 Complex Event Processor+4	4/10/2017	17/6/2026	The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex Event Processor 4.2.0, WSO2 Dashboard Server 2.0.0, WSO2 Data Analytics Server 3.1.0, WSO2 Data Services Server 3.5.1, and WSO2 Machine Learner 1.2.0 is affected by stored XSS.
CVE-2017-14651	Modificada	Media (4.8)	3.8%	—	Wso2 API Manager Wso2 APP Manager Wso2 Application Server Wso2 Business Process Server+13	21/9/2017	17/6/2026	WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter.