Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3005▼ 69 respecto a la semana anterior

Críticas / altas1419▲ 52 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-6489	Modificada	Crítica (9.8)	1.2%	—	Microfocus Project AND Portfolio Management Center	22/2/2018	17/6/2026	XML External Entity (XXE) vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability can be exploited to allow XML External Entity (XXE)
CVE-2017-8993	Modificada	Media (5.4)	0.78%	—	Microfocus Project AND Portfolio Management	15/2/2018	17/6/2026	A Remote Cross-Site Scripting vulnerability in HPE Project and Portfolio Management (PPM) version v9.30, v9.31, v9.32, v9.40 was found.
CVE-2017-14362	Modificada	Alta (7.3)	0.50%	—	Microfocus Project AND Portfolio Management	13/12/2017	17/6/2026	Cross-Site Request Forgery vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Cross-Site Forgery attack.
CVE-2017-14361	Modificada	Alta (7.4)	1.0%	—	Microfocus Project AND Portfolio Management	13/12/2017	17/6/2026	Man-In-The-Middle vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Man-in-the-middle attack.
CVE-2016-4370	Modificada	Alta (8.8)	2.3%	—	HPE Project AND Portfolio Management Center	9/6/2016	17/6/2026	HPE Project and Portfolio Management Center (PPM) 9.2x and 9.3x before 9.32.0002 allows remote authenticated users to execute arbitrary commands or obtain sensitive information via unspecified vectors.
CVE-2010-0452	Modificada	Media (4.3)	2.7%	—	HP Project AND Portfolio Management Center	29/3/2010	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in HP Project and Portfolio Management Center (PPMC, formerly Mercury IT Governance) 7.1 through SP10 and 7.5 through SP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.