Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2635▼ 211 respecto a la semana anterior
Críticas / altas1376▲ 147 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (9.4) | 0.28% | — | Eclipse Jersey | 18/11/2025 | 17/6/2026 | In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under normal circumstances, but under certain conditions, it could lead… | |
| Modificada | Media (5.5) | 0.87% | — | Eclipse JerseyOracle Communications Cloud Native Core PolicyOracle Communications Cloud Native Core Unified Data Repository | 22/4/2021 | 17/6/2026 | Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. This is due to the use of the File.createTempFile which creates a file inside of the system temporary directory with the permissions: -rw-r--r--. Thus the contents of this file are viewable by all other… | |
| Modificada | Alta (7.5) | 2.2% | — | Jersey Project Jersey | 15/12/2019 | 17/6/2026 | jersey: XXE via parameter entities not disabled by the jersey SAX parser | |
| Modificada | Media (5.4) | 0.27% | — | Standardchartered Breeze Jersey | 19/10/2014 | 17/6/2026 | The Breeze Jersey (aka com.sc.breezeje.banking) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. |