Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2811▼ 173 respecto a la semana anterior

Críticas / altas1356▲ 48 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)267▼ 256 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-29887	Modificada	Crítica (9.6)	0.66%	—	Intel Manageability Commander	11/8/2023	17/6/2026	Cross-site Scripting (XSS) in some Intel(R) Manageability Commander software before version 2.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
CVE-2022-41610	Modificada	Media (5.5)	0.16%	—	Intel Endpoint Management Assistant Configuration Tool Intel Manageability Commander	10/5/2023	17/6/2026	Improper authorization in Intel(R) EMA Configuration Tool before version 1.0.4 and Intel(R) MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access.
CVE-2022-26341	Modificada	Alta (8.8)	0.47%	—	Intel Active Management Technology Software Development KIT Intel Endpoint Management Assistant Intel Manageability Commander	11/11/2022	17/6/2026	Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access.
CVE-2021-0126	Modificada	Alta (8)	0.39%	—	Intel Manageability Commander	12/5/2022	17/6/2026	Improper input validation for the Intel(R) Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.