Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2622▼ 226 respecto a la semana anterior

Críticas / altas1383▲ 155 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-29726	Modificada	Media (5.3)	0.87%	—	IBM Secure External Authentication Server IBM Sterling Secure Proxy	17/5/2022	17/6/2026	IBM Sterling Secure Proxy 6.0.3 and IBM Secure External Authentication Server 6.0.3 does not properly ensure that a certificate is actually associated with the host due to improper validation of certificates. IBM X-Force ID: 201104.
CVE-2021-29749	Modificada	Media (5.4)	0.83%	—	IBM Secure External Authentication Server IBM Sterling Secure Proxy	15/7/2021	17/6/2026	IBM Secure External Authentication Server 6.0.2 and IBM Secure Proxy 6.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 201777.
CVE-2021-29725	Modificada	Alta (7.5)	2.9%	—	IBM Secure External Authentication Server IBM Sterling Secure Proxy	15/7/2021	17/6/2026	IBM Secure External Authentication Server 2.4.3.2, 6.0.1, 6.0.2 and IBM Secure Proxy 3.4.3.2, 6.0.1, 6.0.2 could allow a remote user to consume resources causing a denial of service due to a resource leak.