Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3026▼ 51 respecto a la semana anterior
Críticas / altas1414▲ 60 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)381▼ 129 respecto a la semana anterior
–

11 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaBaja (3.2)0.16%—Hcltech HCL Leap24/4/202517/6/2026
Missing "no cache" headers in HCL Leap permits sensitive data to be cached.
AnalizadaBaja (3.2)0.16%—Hcltech HCL Leap24/4/202517/6/2026
Missing "no cache" headers in HCL Leap permits user directory information to be cached.
AnalizadaMedia (4.6)0.29%—Hcltech HCL Leap24/4/202517/6/2026
Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications.
AnalizadaMedia (5.4)0.23%—Hcltech HCL Leap24/4/202517/6/2026
Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications.
AnalizadaMedia (6.1)0.26%—Hcltech HCL Leap24/4/202517/6/2026
Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications.
AnalizadaMedia (5.4)0.24%—Hcltech HCL Leap24/4/202517/6/2026
Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment.
AnalizadaMedia (5.4)0.30%—Hcltech HCL Leap24/4/202517/6/2026
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget.
AnalizadaMedia (5.3)0.31%—Hcltech HCL Leap24/4/202517/6/2026
Insufficient default configuration in HCL Leap allows anonymous access to directory information.
AnalizadaMedia (6.1)0.24%—Hcltech HCL Leap24/4/202517/6/2026
Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters.
AnalizadaMedia (4.1)0.27%—Hcltech HCL Leap24/4/202517/6/2026
Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem.
ModificadaMedia (5.4)0.29%—Hcltech HCL Leap12/2/202317/6/2026
An open redirect to malicious sites can occur when accessing the "Feedback" action on the manager page.