Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3007▼ 67 respecto a la semana anterior
Críticas / altas1403▲ 50 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)390▼ 120 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (5.8) | 1.2% | — | Ivanti Landesk Management GatewayAI | 23/4/2025 | 17/6/2026 | A directory traversal vulnerability exists in Ivanti LANDesk Management Gateway through 4.2-1.9. By appending %3F.php to the URI of the /client/index.php endpoint, an attacker can bypass access controls and gain unauthorized access to various endpoints such as /client/index.php%3F.php/gsb/firewall.php within the… | |
| Modificada | Crítica (9.1) | 1.6% | — | Oracle Customer Relationship Management Gateway FOR Mobile Devices | 15/7/2020 | 17/6/2026 | Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobile Applications). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Gateway… | |
| Modificada | Crítica (9.1) | 1.6% | — | Oracle Customer Relationship Management Gateway FOR Mobile Devices | 15/7/2020 | 17/6/2026 | Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobile Applications). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Gateway… | |
| Modificada | Alta (8.6) | 1.7% | — | Oracle Customer Relationship Management Gateway FOR Mobile Devices | 15/4/2020 | 17/6/2026 | Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobile Applications). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Gateway… | |
| Analizada | Crítica (9.8) | 49% | ⚠ Explotación activa | Microsoft Forefront Threat Management Gateway | 16/6/2011 | 16/6/2026 | The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability." | |
| Modificada | Alta (8.5) | 3.5% | — | Landesk Management Gateway | 15/11/2010 | 16/6/2026 | gsb/drivers.php in LANDesk Management Gateway 4.0 through 4.0-1.48 and 4.2 through 4.2-1.8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the DRIVES parameter, as demonstrated by a cross-site request forgery (CSRF) attack. | |
| Modificada | Media (4.3) | 23% | — | Microsoft Forefront Threat Management GatewayMicrosoft Internet Security AND Acceleration Server | 15/4/2009 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in cookieauth.dll in the HTML forms authentication component in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2006, 2006 Supportability Update, and 2006 SP1; allows remote attackers to… | |
| Modificada | Media (5) | 78% | — | Microsoft Forefront Threat Management GatewayMicrosoft Internet Security AND Acceleration Server | 15/4/2009 | 16/6/2026 | The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2004 SP3, 2006, 2006 Supportability Update, and 2006 SP1; does not properly manage the session state of web listeners, which allows remote attackers to cause a… |