Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2855▼ 166 respecto a la semana anterior

Críticas / altas1379▲ 45 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)266▼ 260 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-22835	Modificada	Media (6.5)	14%	—	Overit Geocall	10/3/2022	17/6/2026	An issue was discovered in OverIT Geocall before version 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XXE vulnerability to read arbitrary files from the filesystem.
CVE-2022-22834	Modificada	Alta (8.8)	3.5%	—	Overit Geocall	10/3/2022	17/6/2026	An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XSLT Injection vulnerability. Attackers could exploit this issue to achieve remote code execution.
CVE-2019-5891	Modificada	Crítica (9.8)	1.6%	—	Overit Geocall	1/4/2019	17/6/2026	An issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet allows an attacker to obtain a cookie of an authenticated user, and login to the web application.
CVE-2019-5890	Modificada	Alta (8.8)	1.8%	—	Overit Geocall	1/4/2019	17/6/2026	An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions.
CVE-2019-5889	Modificada	Alta (7.5)	2.2%	—	Overit Geocall	1/4/2019	17/6/2026	An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977.
CVE-2019-5888	Modificada	Media (6.1)	0.90%	—	Overit Geocall	1/4/2019	17/6/2026	Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977.