Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2663▼ 380 respecto a la semana anterior
Críticas / altas1289▼ 36 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 274 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.8) | 0.62% | — | Cisco Firepower Management Center 2600 FirmwareCisco Firepower Appliance 7030 FirmwareCisco Firepower Appliance 7110 FirmwareCisco Firepower Appliance 7115 Firmware+30 | 16/10/2019 | 17/6/2026 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. These vulnerabilities are due to insufficient validation of… | |
| Modificada | Media (4.8) | 0.80% | — | Cisco Firepower Management Center 2600 FirmwareCisco Firepower Appliance 7030 FirmwareCisco Firepower Appliance 7110 FirmwareCisco Firepower Appliance 7115 Firmware+30 | 16/10/2019 | 17/6/2026 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. These vulnerabilities are due to insufficient validation of… | |
| Modificada | Alta (8.8) | 0.94% | — | Cisco Secure Firewall Management CenterCisco Firepower Appliance 8360 FirmwareCisco Firepower Management Center 2500 FirmwareCisco Firepower Appliance 8120 Firmware+28 | 21/6/2018 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the… |