Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2797▼ 203 respecto a la semana anterior
Críticas / altas1352▲ 28 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)255▼ 266 respecto a la semana anterior
–

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaBaja (3.1)0.22%—Hcltech Dryice Mycloud21/7/20263/8/2026
HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse.
AnalizadaBaja (3.1)0.15%—Hcltech Dryice Mycloud21/7/20263/8/2026
HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack.
AnalizadaBaja (2.6)0.15%—Hcltech Dryice Mycloud21/7/20263/8/2026
HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens.
AnalizadaBaja (2.2)0.28%—Hcltech Dryice Mycloud21/7/20263/8/2026
HCL MyCloud was affected by Using Components with Known Vulnerability ( IIS Server ). It may allow attackers to exploit publicly disclosed weaknesses and compromise the system.
AnalizadaBaja (3.1)0.25%—Hcltech Dryice Mycloud21/7/20263/8/2026
HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misuse the exposed information and compromise the application's security.
AnalizadaBaja (2.2)0.26%—Hcltech Dryice Mycloud21/7/20263/8/2026
HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit known vulnerabilities affecting the disclosed software versions.
AnalizadaMedia (6.5)0.28%—Hcltech Dryice Mycloud21/7/20263/8/2026
HCL MyCloud was affected with Weak Password Policy. It may increase the risk of account compromise through brute-force or credential-based attacks.
AnalizadaCrítica (9.1)0.35%—Hcltech Dryice Mycloud25/2/202517/6/2026
HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information disclosure and potential for Server-Side Request Forgery (SSRF) and Denial of Service(DOS) attacks from unauthenticated users.
ModificadaAlta (7.1)0.10%—Hcltech Dryice Mycloud9/8/202317/6/2026
HCL DRYiCE MyCloud is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information.