Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2540▼ 352 respecto a la semana anterior
Críticas / altas1339▲ 68 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 6 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Pendiente de análisis | Alta (8.2) | 0.46% | — | Cisco Adaptive Security Device ManagerAICisco Secure FMC SoftwareAI | 16/9/2026 | 18/9/2026 | A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An attacker could… | |
| Modificada | Alta (7.2) | 3.4% | — | Cisco ISA 3000 FirmwareCisco ASA 5585-x FirmwareCisco ASA 5512-x FirmwareCisco ASA 5515-x Firmware+1 | 24/6/2022 | 17/6/2026 | A vulnerability in the packaging of Cisco Adaptive Security Device Manager (ASDM) images and the validation of those images by Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker with administrative privileges to upload an ASDM image that contains malicious code to a device… | |
| Modificada | Media (5.5) | 0.42% | — | Cisco Adaptive Security Device Manager | 22/6/2022 | 17/6/2026 | A vulnerability in the logging component of Cisco Adaptive Security Device Manager (ASDM) could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. Cisco ADSM must be deployed in a shared workstation environment for this issue to be exploited. This vulnerability is… | |
| Modificada | Alta (8.1) | 20% | — | Cisco Adaptive Security Device Manager | 8/7/2021 | 17/6/2026 | A vulnerability in the Cisco Adaptive Security Device Manager (ASDM) Launcher could allow an unauthenticated, remote attacker to execute arbitrary code on a user's operating system. This vulnerability is due to a lack of proper signature verification for specific code exchanged between the ASDM and the Launcher. An… | |
| Modificada | Media (4.3) | 0.84% | — | Cisco Router AND Security Device Manager | 4/5/2010 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in Cisco Router and Security Device Manager (SDM) allows remote attackers to inject arbitrary web script or HTML via unknown vectors, aka Bug ID CSCtb38467. | |
| Modificada | Baja (3.5) | 1.2% | — | Cisco ACS Solution EngineCiscoworksCisco IP CommunicatorCisco Meetingplace+14 | 16/3/2007 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified… |