Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2750▲ 27 respecto a la semana anterior
Críticas / altas1468▲ 334 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)85▼ 441 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7.8) | 0.12% | — | IBM Infosphere Data Replication Vsam FOR Z/os Remote Source | 7/10/2025 | 17/6/2026 | IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with access to the files storing CECSUB or CECRM on the container could overflow the buffer and execute arbitrary code on the system. | |
| Analizada | Media (6.5) | 0.39% | — | IBM Infosphere Data Replication | 8/7/2025 | 17/6/2026 | IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 could allow a remote user to cause a denial of service by sending an invalid HTTP request to the log reading service. | |
| Modificada | Crítica (9.8) | 2.0% | — | IBM Infosphere Data ReplicationIBM Infosphere Change Data Capture | 16/7/2021 | 17/6/2026 | IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a user to bypass authentication mechanisms using an empty password string. IBM X-Force ID: 189834 | |
| Modificada | Alta (7.5) | 3.0% | — | IBM Infosphere Data Replication Dashboard | 9/7/2018 | 16/6/2026 | Directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to read arbitrary files via unspecified vectors. IBM X-Force ID: 84127. | |
| Modificada | Crítica (9.8) | 1.8% | — | IBM Infosphere Data Replication Dashboard | 9/7/2018 | 16/6/2026 | SQL injection vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. IBM X-Force ID: 84116. | |
| Modificada | Media (6.1) | 1.0% | — | IBM Infosphere Data Replication Dashboard | 9/7/2018 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 84115. |