Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2635▼ 212 respecto a la semana anterior

Críticas / altas1376▲ 147 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-45885	Modificada	Media (5.4)	0.46%	—	Nasa Openmct	9/11/2023	17/6/2026	Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin.
CVE-2023-45884	Modificada	Media (6.5)	0.33%	—	Nasa Openmct	9/11/2023	17/6/2026	Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin.
CVE-2023-45282	Modificada	Alta (7.5)	0.94%	—	Nasa Openmct	6/10/2023	17/6/2026	In NASA Open MCT (aka openmct) before 3.1.0, prototype pollution can occur via an import action.
CVE-2022-23054	Modificada	Media (6.1)	0.61%	—	Nasa Openmct	20/2/2022	17/6/2026	Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Summary Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.
CVE-2022-23053	Modificada	Media (6.1)	0.61%	—	Nasa Openmct	20/2/2022	17/6/2026	Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Condition Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.
CVE-2022-22126	Modificada	Media (6.1)	0.61%	—	Nasa Openmct	20/2/2022	17/6/2026	Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.