Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2625▼ 312 respecto a la semana anterior
Críticas / altas1347▲ 72 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)61▼ 466 respecto a la semana anterior
50 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Pendiente de análisis | Alta (7.1) | 0.29% | — | Oracle Order ManagementAI | 15/9/2026 | 18/9/2026 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Enterprise Command Center). The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks… | |
| Pendiente de análisis | Alta (8.1) | 0.35% | — | Oracle Order ManagementAIOracle E-business SuiteAI | 15/9/2026 | 18/9/2026 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful… | |
| Aplazada | Alta (8.7) | 0.32% | — | Oracle Siebel Apps - Customer Order ManagementAI | 15/9/2026 | 18/9/2026 | Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Customer Order… | |
| Aplazada | Alta (8.7) | 0.32% | — | Oracle Siebel Apps - Customer Order ManagementAI | 15/9/2026 | 18/9/2026 | Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Customer Order… | |
| Aplazada | Alta (7.7) | 0.37% | — | Oracle Order ManagementAIOracle E-business SuiteAI | 15/9/2026 | 21/9/2026 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. While the… | |
| Analizada | Alta (7.2) | 0.14% | — | Oracle Order Management | 18/8/2026 | 28/8/2026 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Order Management executes to… | |
| Analizada | Alta (7.5) | 0.33% | — | Oracle Order Management | 18/8/2026 | 28/8/2026 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management.… | |
| Analizada | Alta (7.1) | 0.24% | — | Oracle Order Management | 18/8/2026 | 28/8/2026 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. While the… | |
| Analizada | Alta (8.1) | 0.36% | — | Oracle Order Management | 21/7/2026 | 17/8/2026 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful… | |
| Analizada | Alta (7.2) | 0.49% | — | Oracle Order Management | 21/7/2026 | 28/7/2026 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful… | |
| Analizada | Media (6.5) | 0.35% | — | Oracle Order Management | 21/7/2026 | 28/7/2026 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful… | |
| Analizada | Alta (7.5) | 0.41% | — | Oracle Peoplesoft Enterprise SCM Order Management | 21/7/2026 | 6/8/2026 | Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise PeopleSoft Enterprise SCM Order Management.… | |
| Analizada | Crítica (9.1) | 0.43% | — | Oracle Peoplesoft Enterprise SCM Order Management | 21/7/2026 | 4/8/2026 | Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Order Management.… | |
| Analizada | Alta (7.8) | 0.16% | — | Oracle Peoplesoft Enterprise SCM Order Management | 21/7/2026 | 4/8/2026 | Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise SCM Order Management executes… | |
| Analizada | Alta (8.8) | 0.43% | — | Oracle Order Management | 21/7/2026 | 30/7/2026 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful… | |
| Analizada | Media (6.4) | 0.23% | — | Oracle Order Management | 21/7/2026 | 30/7/2026 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. While the… | |
| Analizada | Media (6.8) | 0.40% | — | Oracle Order Management | 21/7/2026 | 30/7/2026 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Order Management. While the… | |
| Analizada | Media (5.3) | 0.53% | — | Go2ismail Asp.net-core-inventory-order-management-system | 26/2/2026 | 17/6/2026 | A vulnerability was found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected by this vulnerability is an unknown functionality of the file /api/Security/ of the component Security API. Performing a manipulation results in improper authorization. Remote exploitation of the attack is… | |
| Analizada | Baja (2.1) | 0.71% | — | Go2ismail Asp.net-core-inventory-order-management-system | 26/2/2026 | 17/6/2026 | A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected is an unknown function of the component Administrative Interface. Such manipulation leads to execution after redirect. The attack may be launched remotely. The exploit has been disclosed to the public… | |
| Aplazada | Media (6.6) | 0.27% | — | Klarna Order Management FOR WoocommerceAI | 3/9/2025 | 17/6/2026 | Insertion of Sensitive Information Into Debugging Code vulnerability in Klarna Klarna Order Management for WooCommerce klarna-order-management-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Klarna Order Management for WooCommerce: from n/a through <= 1.9.8. | |
| Analizada | Alta (7.2) | 0.90% | — | Oretnom23 Purchase Order Management System | 24/10/2024 | 17/6/2026 | An issue in SourceCodester Purchase Order Management System v1.0 allows a remote attacker to execute arbitrary code via the /admin?page=user component | |
| Modificada | Crítica (10) | 1.3% | — | Veribase Order Management | 12/8/2024 | 17/6/2026 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Veribilim Software Veribase Order Management allows OS Command Injection. This issue affects Veribase Order Management: before v4.010.2. | |
| Modificada | Media (4.8) | 0.56% | — | Purchase Order Management System Project Purchase Order Management System | 25/4/2023 | 17/6/2026 | A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been classified as problematic. This affects an unknown part of the file classes/Master.php?f=save_item. The manipulation of the argument description with the input <script>alert(document.cookie)</script> leads to cross site… | |
| Modificada | Crítica (9.8) | 4.1% | — | Purchase Order Management System Project Purchase Order Management System | 17/4/2023 | 17/6/2026 | A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0. Affected is an unknown function of the file /admin/suppliers/view_details.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the… | |
| Modificada | Media (6.1) | 1.3% | — | Purchase Order Management Project Purchase Order Management | 14/4/2023 | 17/6/2026 | Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the password parameter at /purchase_order/classes/login.php. |