Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3376▲ 735 respecto a la semana anterior
Críticas / altas1590▲ 188 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 1 respecto a la semana anterior
Sin puntuar (sin CVSS)256▲ 244 respecto a la semana anterior
160 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Pendiente de análisis | Alta (7.1) | 0.24% | — | Oracle Agile Engineering Data ManagementAI | 15/9/2026 | 17/9/2026 | Vulnerabilidad en el producto Oracle Agile Engineering Data Management de Oracle Supply Chain (componente: Engineering Communication Interface). La versión compatible afectada es la 6.2.1. Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso al segmento de comunicación física… | |
| Pendiente de análisis | Alta (7.3) | 0.14% | — | Oracle Agile Engineering Data ManagementAI | 15/9/2026 | 17/9/2026 | Vulnerabilidad en el producto Oracle Agile Engineering Data Management de Oracle Supply Chain (componente: Engineering Communication Interface). La versión compatible afectada es la 6.2.1. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios que haya iniciado sesión en la… | |
| Pendiente de análisis | Alta (7.3) | 0.23% | — | Oracle Agile Engineering Data ManagementAI | 15/9/2026 | 17/9/2026 | Vulnerabilidad en el producto Oracle Agile Engineering Data Management de Oracle Supply Chain (componente: Engineering Communication Interface). La versión compatible afectada es la 6.2.1. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y con acceso al segmento de comunicación… | |
| Pendiente de análisis | Alta (8.4) | 0.14% | — | Oracle Agile Engineering Data ManagementAI | 15/9/2026 | 17/9/2026 | Vulnerabilidad en el producto Oracle Agile Engineering Data Management de Oracle Supply Chain (componente: Engineering Communication Interface). La versión compatible afectada es la 6.2.1. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios que haya iniciado sesión en la… | |
| Analizada | Alta (7.1) | 0.35% | — | Vmware Spring Data Rest | 27/8/2026 | 2/9/2026 | Spring Data REST no protege las propiedades de identificador (@Id) y versión (@Version) frente a su modificación mediante solicitudes JSON Patch RFC 6902 (application/json-patch+json). Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST… | |
| Analizada | Media (4.3) | 0.31% | — | Vmware Spring Data Rest | 27/8/2026 | 4/9/2026 | Spring Data REST no conserva la propiedad de versión persistida (@Version) de una raíz de agregado al gestionar un HTTP PUT contra un tipo de destino inmutable. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20 y anteriores | |
| Analizada | Media (6.5) | 0.34% | — | Vmware Spring Data JPA | 26/8/2026 | 4/9/2026 | La validación de Sort de Spring Data JPA puede omitirse cuando se aceptan desde fuentes no confiables parámetros que contienen una carga útil manipulada. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15 | |
| Analizada | Alta (8.1) | 0.39% | — | Oracle Agile Engineering Data Management | 18/8/2026 | 24/8/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services Security). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Engineering Data… | |
| Analizada | Alta (8.8) | 0.43% | — | Oracle Agile Engineering Data Management | 18/8/2026 | 24/8/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services Security). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering Data… | |
| Analizada | Media (6.4) | 0.15% | — | Oracle Agile Engineering Data Management | 18/8/2026 | 4/9/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes… | |
| Analizada | Media (4.8) | 0.22% | — | Agile Engineering Data Management Product OF Oracle Supply Chain | 18/8/2026 | 4/9/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile… | |
| Analizada | Alta (8.2) | 0.29% | — | Agile Engineering Data Management Product OF Oracle Supply Chain | 18/8/2026 | 4/9/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile… | |
| Modificada | Media (6.7) | 0.18% | — | Oracle Agile Engineering Data Management | 18/8/2026 | 25/8/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes… | |
| Modificada | Alta (7) | 0.13% | — | Oracle Agile Engineering Data Management | 18/8/2026 | 25/8/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile… | |
| Modificada | Media (6.3) | 0.14% | — | Oracle Agile Engineering Data Management | 18/8/2026 | 26/8/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile… | |
| Modificada | Alta (7.5) | 0.33% | — | Oracle Agile Engineering Data Management | 18/8/2026 | 25/8/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached… | |
| Analizada | Media (6.5) | 0.42% | — | Oracle Agile Engineering Data Management | 21/7/2026 | 28/7/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Core). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Agile Engineering Data Management. Successful… | |
| Analizada | Media (6.5) | 0.42% | — | Oracle Agile Engineering Data Management | 21/7/2026 | 28/7/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Core). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Agile Engineering Data Management. Successful… | |
| Analizada | Media (5.3) | 0.34% | — | Oracle Agile Engineering Data Management | 21/7/2026 | 28/7/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management.… | |
| Analizada | Media (4.4) | 0.14% | — | Oracle Agile Engineering Data Management | 21/7/2026 | 28/7/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Document Management). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management… | |
| Analizada | Media (6.4) | 0.26% | — | Oracle Agile Engineering Data Management | 21/7/2026 | 29/7/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management.… | |
| Analizada | Media (6.5) | 0.15% | — | Oracle Agile Engineering Data Management | 21/7/2026 | 29/7/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to… | |
| Analizada | Baja (2.8) | 0.14% | — | Oracle Agile Engineering Data Management | 21/7/2026 | 28/7/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to… | |
| Analizada | Crítica (9.4) | 0.41% | — | Oracle Agile Engineering Data Management | 21/7/2026 | 29/7/2026 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management.… | |
| Analizada | Media (5.3) | 0.31% | — | Vmware Spring Data Rest | 10/6/2026 | 23/7/2026 | La integración de Querydsl de Spring Data REST acepta rutas de propiedades persistentes arbitrarias como claves de filtro de parámetros de solicitud y no considera las personalizaciones de Jackson antes de pasarlas a Querydsl. Versiones afectadas: Spring Data REST 3.7.0 hasta 3.7.19; 4.3.0 hasta 4.3.16; 4.4.0 hasta… |