Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2797▼ 203 respecto a la semana anterior
Críticas / altas1352▲ 28 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)255▼ 266 respecto a la semana anterior
11 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 2.6% | — | HP Operations Orchestration | 2/3/2018 | 17/6/2026 | Denial of Service vulnerability in Micro Focus Operations Orchestration Software, version 10.x. This vulnerability could be remotely exploited to allow Denial of Service. | |
| Modificada | Crítica (9.8) | 28% | — | HP Operations Orchestration | 15/2/2018 | 17/6/2026 | A remote code execution vulnerability in HPE Operations Orchestration Community edition and Enterprise edition prior to v10.70 was found. | |
| Modificada | Crítica (9.8) | 9.8% | — | HP Operations Orchestration | 10/10/2017 | 17/6/2026 | A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remotely. | |
| Modificada | Crítica (9.8) | 6.7% | — | HP Operations OrchestrationHP Operations Orchestration Content | 22/3/2016 | 17/6/2026 | HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library. | |
| Modificada | Media (6.8) | 1.5% | — | HP Operations Orchestration | 23/11/2015 | 17/6/2026 | Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration Central 10.x before 10.22.001 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. | |
| Modificada | Alta (7.5) | 4.1% | — | HP Operations Orchestration | 31/3/2015 | 17/6/2026 | Unspecified vulnerability in HP Operations Orchestration 10.x allows remote attackers to bypass authentication, and obtain sensitive information or modify data, via unknown vectors. | |
| Modificada | Baja (3.5) | 1.9% | — | HP Operations Orchestration | 31/3/2015 | 17/6/2026 | Unspecified vulnerability in Powershell Operations in HP Operations Orchestration 9.x and 10.x allows remote authenticated users to obtain sensitive information via unknown vectors. | |
| Modificada | Media (6.8) | 0.97% | — | HP Operations Orchestration | 17/12/2013 | 17/6/2026 | Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. | |
| Modificada | Media (4.3) | 2.5% | — | HP Operations Orchestration | 17/12/2013 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | |
| Modificada | Alta (10) | 9.9% | — | HP Operations Orchestration | 19/9/2012 | 16/6/2026 | Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary code via unknown vectors. | |
| Modificada | Media (4.3) | 2.0% | — | HP Operations Orchestration | 26/10/2010 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |