Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2568▼ 310 respecto a la semana anterior

Críticas / altas1351▲ 96 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-42234	Analizada	Media (5.4)	0.17%	—	Zucchetti Helpdeskadvanced	13/1/2025	17/6/2026	Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request Forgery (CSRF) via the WSCView function.
CVE-2023-42233	Analizada	Media (6.1)	0.23%	—	Zucchetti Helpdeskadvanced	13/1/2025	17/6/2026	Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the Filter/FilterEditor function.
CVE-2023-42232	Analizada	Alta (7.5)	0.97%	—	Zucchetti Helpdeskadvanced	13/1/2025	17/6/2026	Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function.
CVE-2023-42231	Analizada	Alta (8.1)	0.33%	—	Zucchetti Helpdeskadvanced	13/1/2025	17/6/2026	Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can delete admin users by sending a request to the "WSCView/Delete" function.
CVE-2023-42230	Analizada	Media (6.1)	0.28%	—	Zucchetti Helpdeskadvanced	13/1/2025	17/6/2026	Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the WSCView/Save function.
CVE-2023-42229	Analizada	Media (6.5)	0.70%	—	Zucchetti Helpdeskadvanced	13/1/2025	17/6/2026	Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal. Arbitrary files can be created on the system via authenticated SOAP requests to the WSConnector service.
CVE-2023-42228	Analizada	Alta (8.8)	0.45%	—	Zucchetti Helpdeskadvanced	13/1/2025	17/6/2026	Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can edit their own ACL rules by sending a request to the "AclList/SaveAclRules" administrative function.
CVE-2023-42227	Analizada	Alta (7.5)	0.76%	—	Zucchetti Helpdeskadvanced	13/1/2025	17/6/2026	Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function.
CVE-2023-42226	Analizada	Alta (7.5)	0.76%	—	Zucchetti Helpdeskadvanced	13/1/2025	17/6/2026	Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function.
CVE-2023-42225	Analizada	Alta (7.5)	0.76%	—	Zucchetti Helpdeskadvanced	13/1/2025	17/6/2026	Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Attachment/DownloadTempFile function.