Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2019-4513	Modificada	Alta (8.2)	2.8%	—	IBM Security Access Manager FOR Enterprise Single Sign-on	26/8/2019	17/6/2026	IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 164555.
CVE-2017-1732	Modificada	Media (5.3)	1.3%	—	IBM Security Access Manager FOR Enterprise Single Sign-on	17/8/2018	17/6/2026	IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure…
CVE-2015-0235	Modificada	Alta (10)	95%	💥 Exploit	GNU Glibc Oracle Communications Application Session Controller Oracle Communications Eagle Application Processor Oracle Communications Eagle LNP Application Processor+14	28/1/2015	17/6/2026	Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."
CVE-2013-5420	Modificada	Baja (3.5)	0.85%	—	IBM Security Access Manager FOR Enterprise Single Sign-on	23/12/2013	16/6/2026	The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote authenticated users to read log files by leveraging helpdesk privileges for a direct request.
CVE-2013-6745	Modificada	Baja (3.5)	0.95%	—	IBM Security Access Manager FOR Enterprise Single Sign-on	22/12/2013	17/6/2026	Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form.
CVE-2013-5421	Modificada	Media (4.3)	0.93%	—	IBM Security Access Manager FOR Enterprise Single Sign-on	22/12/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote attackers to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form.