Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2882▼ 181 respecto a la semana anterior

Críticas / altas1279▼ 60 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)487▼ 22 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-20060	Analizada	Media (6.1)	0.53%	—	Cisco Prime Collaboration Deployment	15/11/2024	17/6/2026	A vulnerability in the web-based management interface of Cisco Prime Collaboration Deployment could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate…
CVE-2023-20259	Modificada	Alta (7.5)	0.81%	—	Cisco Emergency Responder Cisco Prime Collaboration Deployment Cisco Unified Communications Manager Cisco Unified Communications Manager IM & Presence Service+1	4/10/2023	17/6/2026	A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web-based management interface and cause delays with call processing. This API is not used for device management and is…
CVE-2016-1437	Modificada	Media (6.5)	1.4%	—	Cisco Prime Collaboration Deployment	23/6/2016	17/6/2026	SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy92549.