Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2739▲ 32 respecto a la semana anterior

Críticas / altas1474▲ 364 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 464 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-40662	Analizada	Media (6.9)	0.35%	—	ACC DM Corporative CMS	10/6/2025	17/6/2026	Absolute path disclosure vulnerability in DM Corporative CMS. This vulnerability allows an attacker to view the contents of webroot/file, if navigating to a non-existent file.
CVE-2025-40661	Analizada	Media (6.9)	0.33%	—	ACC DM Corporative CMS	10/6/2025	17/6/2026	An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/selection.asp.
CVE-2025-40660	Analizada	Media (6.9)	0.33%	—	ACC DM Corporative CMS	10/6/2025	17/6/2026	An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/select node/data.asp?mode=catalogue&id1=1&id2=1session=&cod=1&networks=0.
CVE-2025-40659	Analizada	Media (6.9)	0.33%	—	ACC DM Corporative CMS	10/6/2025	17/6/2026	An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelectionNetworks.asp.
CVE-2025-40658	Analizada	Media (6.9)	0.33%	—	ACC DM Corporative CMS	10/6/2025	17/6/2026	An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelection.asp.
CVE-2025-40657	Analizada	Crítica (9.3)	0.37%	—	ACC DM Corporative CMS	10/6/2025	17/6/2026	A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the codform parameter in /modules/forms/collectform.asp.
CVE-2025-40656	Analizada	Crítica (9.3)	0.37%	—	ACC DM Corporative CMS	10/6/2025	17/6/2026	A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the cod parameter in /administer/node-selection/data.asp.
CVE-2025-40655	Analizada	Crítica (9.3)	0.37%	—	ACC DM Corporative CMS	10/6/2025	17/6/2026	A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name parameter in /antcatalogue.asp.
CVE-2025-40654	Analizada	Crítica (9.3)	0.37%	—	ACC DM Corporative CMS	10/6/2025	17/6/2026	A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name and cod parameters in /antbuspre.asp.