Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2855▼ 333 respecto a la semana anterior

Críticas / altas1381▼ 36 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)296▼ 213 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-51461	Analizada	Media (6.5)	0.40%	—	IBM Qradar Wincollect	11/4/2025	17/6/2026	IBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow a remote attacker to cause a denial of service by interrupting an HTTP request that could consume memory resources.
CVE-2024-51462	Analizada	Media (5.3)	0.37%	—	IBM Qradar Wincollect	17/1/2025	17/6/2026	IBM QRadar WinCollect Agent 10.0.0 through 10.1.12 could allow a remote attacker to inject XML data into parameter values due to improper input validation of assumed immutable data.
CVE-2022-43880	Analizada	Media (4.4)	0.17%	—	IBM Qradar Wincollect	3/3/2024	17/6/2026	IBM QRadar WinCollect Agent 10.0 through 10.1.2 could allow a privileged user to cause a denial of service. IBM X-Force ID: 240151.
CVE-2023-26279	Modificada	Alta (7.8)	0.22%	—	IBM Qradar Wincollect	24/11/2023	17/6/2026	IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to improper encoding. IBM X-Force ID: 248160.
CVE-2021-39008	Modificada	Media (4.9)	0.60%	—	IBM Qradar Wincollect	23/11/2023	17/6/2026	IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a privileged user to obtain sensitive information due to missing best practices. IBM X-Force ID: 213551.
CVE-2023-38736	Modificada	Alta (7.8)	0.43%	—	IBM Qradar Wincollect	8/9/2023	17/6/2026	IBM QRadar WinCollect Agent 10.0 through 10.1.6, when installed to run as ADMIN or SYSTEM, is vulnerable to a local escalation of privilege attack that a normal user could utilize to gain SYSTEM permissions. IBM X-Force ID: 262542.
CVE-2023-26278	Modificada	Alta (7.8)	0.20%	—	IBM Qradar Wincollect	31/5/2023	17/6/2026	IBM QRadar WinCollect Agent 10.0 through 10.1.3 could allow a local authenticated attacker to gain elevated privileges on the system. IBM X-Force ID: 248158.
CVE-2023-26277	Modificada	Alta (7.8)	0.19%	—	IBM Qradar Wincollect	31/5/2023	17/6/2026	IBM QRadar WinCollect Agent 10.0 though 10.1.3 could allow a local user to execute commands on the system due to execution with unnecessary privileges. IBM X-Force ID: 248156.
CVE-2021-39006	Modificada	Media (5.3)	0.88%	—	IBM Qradar Wincollect	21/6/2022	17/6/2026	IBM QRadar WinCollect Agent 10.0 and 10.0.1 could allow an attacker to obtain sensitive information due to missing best practices. IBM X-Force ID: 213549.