Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3007▼ 67 respecto a la semana anterior

Críticas / altas1403▲ 50 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)390▼ 120 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-10703	Aplazada	Alta (8.6)	0.30%	—	Progress Datadirect Connect FOR Jdbc FOR Amazon Redshift^AI Progress Datadirect Connect FOR Jdbc FOR Apache Cassandra^AI Progress Datadirect Connect FOR Jdbc FOR Hive^AI Progress Datadirect Connect FOR Jdbc FOR Apache Impala^AI+28	19/11/2025	17/6/2026	Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JDBC drivers,…
CVE-2025-10702	Aplazada	Alta (8.6)	0.30%	—	Progress Datadirect Connect FOR Jdbc FOR Amazon Redshift^AI Progress Datadirect Connect FOR Jdbc FOR Apache Cassandra^AI Progress Datadirect Connect FOR Jdbc FOR Hive^AI Progress Datadirect Connect FOR Jdbc FOR Apache Impala^AI+28	19/11/2025	17/6/2026	Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JDBC drivers,…
CVE-2024-13297	Analizada	Media (6.6)	0.41%	—	Eloqua Project Eloqua	9/1/2025	17/6/2026	Deserialization of Untrusted Data vulnerability in Drupal Eloqua allows Object Injection.This issue affects Eloqua: from 7.X-* before 7.X-1.15.