Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2720▼ 598 respecto a la semana anterior

Críticas / altas1299▼ 202 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-7421	Modificada	Media (6.1)	1.3%	—	Microfocus Directory Server Microfocus Enterprise Developer Microfocus Enterprise Server Microfocus Enterprise Server Monitor AND Control	21/8/2017	17/6/2026	Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Administration web UI) and ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2…
CVE-2017-7420	Modificada	Crítica (9.8)	2.4%	—	Microfocus Enterprise Developer Microfocus Enterprise Server Microfocus Enterprise Server Monitor AND Control	21/8/2017	17/6/2026	An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter configuration…
CVE-2017-5187	Modificada	Alta (8.8)	0.75%	—	Microfocus Directory Server Microfocus Enterprise Developer Microfocus Enterprise Server Microfocus Enterprise Server Monitor AND Control	21/8/2017	17/6/2026	A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter…