Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2783▲ 27 respecto a la semana anterior

Críticas / altas1477▲ 294 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)68▼ 441 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2010-4431	Modificada	Baja (1)	0.29%	—	SUN Java System Portal Server	19/1/2011	16/6/2026	Unspecified vulnerability in Oracle Sun Java System Portal Server 7.1 and 7.2 allows local users to affect confidentiality via unknown vectors related to Proxy.
CVE-2009-4187	Modificada	Media (4.3)	1.7%	—	SUN Java System Portal Server	3/12/2009	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in the Gateway component in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2009-1796	Modificada	Media (4.3)	2.0%	—	SUN Java System Portal Server	26/5/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to an error page.
CVE-2008-6192	Modificada	Media (4.3)	1.9%	—	SUN Java System Portal Server	19/2/2009	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in unspecified Portlets in Sun Java System Portal Server 7.0 and 7.1 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2008-5549	Modificada	Media (5)	2.3%	—	SUN Java System Portal Server	12/12/2008	16/6/2026	Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows remote attackers to access local files and read the product's configuration information via unknown vectors related to "access to secure files by ThemeServlet."
CVE-2007-4289	Modificada	Media (6.8)	1.7%	—	SUN Java System Portal Server	9/8/2007	16/6/2026	Sun Java System Portal Server 7.0 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3715.