Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3070▲ 562 respecto a la semana anterior
Críticas / altas1457▲ 278 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)383▲ 176 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Crítica (9.3) | 0.42% | — | Sysinternals Process MonitorAI | 9/6/2026 | 23/7/2026 | A Stored Cross-Site Scripting vulnerability in Vinna Process Monitor Version 4.0 Service Pack 1 (Build 63255) allows an authenticated remote attacker with low privileges to inject malicious JavaScript code into the application. This enables attackers to steal administrative access tokens and session credentials. | |
| Modificada | Media (5.5) | 0.77% | — | Microsoft SysinternalsMicrosoft Sysinternals Process Monitor | 14/6/2023 | 17/6/2026 | Sysinternals Process Monitor for Windows Denial of Service Vulnerability | |
| Modificada | Media (6.1) | 1.3% | — | SAP Process Monitoring Infrastructure | 14/3/2018 | 17/6/2026 | Cross-Site Scripting in Process Monitoring Infrastructure, from 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, due to inefficient encoding of user controlled inputs. | |
| Modificada | Alta (7.5) | 6.4% | — | HP Business Process Monitor | 15/2/2018 | 17/6/2026 | A Remote Unauthorized Access to Data vulnerability in HPE Business Process Monitor version v09.2x, v09.30 was found. | |
| Modificada | Media (4.8) | 0.79% | — | Integrationmatters NjamsTibco Businessworks Process Monitor | 11/12/2017 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in Integration Matters nJAMS 3 before 3.2.0 Hotfix 7, as used in TIBCO BusinessWorks Process Monitor through 3.0.1.3 and other products, allows remote authenticated administrators to inject arbitrary web script or HTML via the users management panel of the web interface. | |
| Modificada | Alta (10) | 3.4% | — | IBM Business Process Monitor | 13/10/2013 | 16/6/2026 | Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors. | |
| Modificada | Alta (10) | 3.4% | — | IBM Business Process Monitor | 13/10/2013 | 16/6/2026 | Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors, aka ZDI-CAN-1802. | |
| Modificada | Media (4.4) | 0.28% | — | Sysinternals Process Monitor | 19/9/2007 | 16/6/2026 | Process Monitor 1.22 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API functions including (1) NtCreateKey, (2)… |