Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2751▲ 74 respecto a la semana anterior
Críticas / altas1464▲ 358 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)89▼ 424 respecto a la semana anterior
2 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7.5) | 1.0% | — | Apache Formatting Objects Processor | 9/10/2024 | 17/6/2026 | Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue. | |
| Modificada | Alta (7.3) | 2.5% | — | Apache Formatting Objects Processor | 18/4/2017 | 17/6/2026 | In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is running. If the user is root a full compromise of the server… |