Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2632▼ 455 respecto a la semana anterior

Críticas / altas1285▼ 65 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)235▼ 275 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-33160	Modificada	Alta (7.5)	0.32%	—	IBM Security Directory Suite VA	6/10/2023	17/6/2026	IBM Security Directory Suite 8.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 228568.
CVE-2022-33166	Modificada	Alta (7.2)	0.79%	—	IBM Security Directory Suite VA	15/6/2023	17/6/2026	IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 could allow a privileged user to upload malicious files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 228586.
CVE-2022-32757	Modificada	Alta (7.5)	0.85%	—	IBM Security Directory Suite VA	15/6/2023	17/6/2026	IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 228510.
CVE-2022-32752	Modificada	Alta (8.8)	1.4%	—	IBM Security Directory Suite VA	15/6/2023	17/6/2026	IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 228439.
CVE-2022-33168	Modificada	Alta (7.5)	0.77%	—	IBM Security Directory Suite VA	15/6/2023	17/6/2026	IBM Security Directory Suite VA 8.0.1 could allow an attacker to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 228588.
CVE-2022-33163	Modificada	Alta (8.1)	0.50%	—	IBM Security Directory Suite VA	15/6/2023	17/6/2026	IBM Security Directory Suite VA 8.0.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 228571.
CVE-2022-33159	Modificada	Media (6.5)	0.34%	—	IBM Security Directory Suite VA	15/6/2023	17/6/2026	IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 228567.