Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2614▼ 473 respecto a la semana anterior

Críticas / altas1270▼ 74 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)243▼ 274 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-26723	Modificada	Media (6.1)	13%	—	Jenzabar	6/2/2021	17/6/2026	Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS.
CVE-2020-8434	Modificada	Crítica (9.8)	1.3%	—	Jenzabar Internet Campus Solution	19/5/2020	17/6/2026	Jenzabar JICS (aka Internet Campus Solution) before 9.0.1 Patch 3, 9.1 before 9.1.2 Patch 2, and 9.2 before 9.2.2 Patch 8 has session cookies that are a deterministic function of the username. There is a hard-coded password to supply a PBKDF feeding into AES to encrypt a username and base64 encode it to a client-side…
CVE-2019-10012	Modificada	Alta (7.5)	1.6%	—	Jenzabar Internet Campus Solution Tiny Moxiemanager	25/3/2019	17/6/2026	Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager (for .NET) plugin before 2.1.4 in the moxiemanager directory within the installation folder ICS\ICS.NET\ICSFileServer.
CVE-2019-10011	Modificada	Crítica (9.8)	2.1%	—	Jenzabar Internet Campus Solution	25/3/2019	17/6/2026	ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet Campus Solution) before 2019-02-06 allows remote attackers to create an arbitrary number of accounts with a password of 1234.
CVE-2018-16778	Modificada	Media (6.1)	0.81%	—	Jenzabar	21/12/2018	17/6/2026	Cross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter (aka the Search Field).