Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2568▼ 306 respecto a la semana anterior
Críticas / altas1351▲ 96 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
16 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (8.4) | 0.42% | — | CA Sitemanager WEB Agent FOR IISAICA Sitemanager WEB Agent FOR DominoAI | 14/6/2024 | 17/6/2026 | A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for IIS Web Server and SiteMinder Web Agent for Domino Web Server. As a result, an attacker can execute arbitrary Javascript code in a client browser. | |
| Modificada | Alta (7.5) | 0.54% | — | Secomea Sitemanager Embedded | 17/7/2023 | 17/6/2026 | Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction. | |
| Modificada | Media (5.5) | 0.16% | — | Secomea Sitemanager 3549 FirmwareSecomea Sitemanager 3539 FirmwareSecomea Sitemanager 3529 FirmwareSecomea Sitemanager 3349 Firmware+8 | 19/4/2023 | 17/6/2026 | Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client. | |
| Modificada | Media (6.5) | 0.53% | — | Secomea Sitemanager 1129 FirmwareSecomea Sitemanager 3329 FirmwareSecomea Sitemanager 1529 FirmwareSecomea Sitemanager 3529 Firmware+8 | 13/12/2022 | 17/6/2026 | Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner. | |
| Modificada | Alta (7.2) | 1.0% | — | Secomea Sitemanager 1129 FirmwareSecomea Sitemanager 1139 FirmwareSecomea Sitemanager 1149 FirmwareSecomea Sitemanager 3329 Firmware+5 | 4/5/2022 | 17/6/2026 | Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution. This issue affects: Secomea SiteManager all versions prior to 9.7. | |
| Modificada | Media (4.8) | 0.61% | — | Secomea Sitemanager 1129 FirmwareSecomea Sitemanager 1139 FirmwareSecomea Sitemanager 1149 FirmwareSecomea Sitemanager 3329 Firmware+5 | 4/5/2022 | 17/6/2026 | Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7. | |
| Modificada | Alta (8.1) | 0.23% | — | Secomea Sitemanager 1129 FirmwareSecomea Sitemanager 1139 FirmwareSecomea Sitemanager 1149 FirmwareSecomea Sitemanager 3329 Firmware+10 | 4/5/2022 | 17/6/2026 | Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue affects: Secomea SiteManager All versions prior to 9.7. Secomea LinkManager versions prior to 9.7. Secomea GateManager versions prior to 9.7. | |
| Modificada | Media (5.4) | 0.59% | — | Secomea Sitemanager 1129 FirmwareSecomea Sitemanager 1139 FirmwareSecomea Sitemanager 1149 FirmwareSecomea Sitemanager 3329 Firmware+5 | 10/3/2022 | 17/6/2026 | Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions. | |
| Modificada | Media (5.5) | 0.23% | — | Secomea Sitemanager Firmware | 5/8/2021 | 17/6/2026 | Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture credentials if the service is used after provisioning. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware. | |
| Modificada | Baja (3.3) | 0.23% | — | Secomea Sitemanager Firmware | 5/8/2021 | 17/6/2026 | Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to gather network information and configuration of the SiteManager. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware. | |
| Modificada | Alta (7.2) | 1.7% | — | Secomea Sitemanager Firmware | 5/3/2021 | 17/6/2026 | Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.620527004 on Hardware. | |
| Modificada | Media (5.4) | 0.49% | — | Secomea Sitemanager 1129 FirmwareSecomea Sitemanager 1139 FirmwareSecomea Sitemanager 1149 FirmwareSecomea Sitemanager 3329 Firmware+5 | 16/2/2021 | 17/6/2026 | Cross-site Scripting (XSS) vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager all versions prior to 9.3. | |
| Modificada | Media (6.1) | 0.61% | — | Secomea Sitemanager Embedded | 16/2/2021 | 17/6/2026 | A vulnerability in SiteManager-Embedded (SM-E) Web server which may allow attacker to construct a URL that if visited by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application. This issue affects all… | |
| Modificada | Media (6.5) | 1.3% | — | Br-automation Sitemanager | 15/10/2020 | 17/6/2026 | The local file inclusion vulnerability present in B&R SiteManager versions <9.2.620236042 allows authenticated users to impact availability of SiteManager instances. | |
| Modificada | Media (6.5) | 1.2% | — | Br-automation Sitemanager | 15/10/2020 | 17/6/2026 | A local file inclusion vulnerability in B&R SiteManager versions <9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances. | |
| Modificada | Alta (7.5) | 1.1% | — | Heartlogic Hl-sitemanager | 9/4/2010 | 16/6/2026 | SQL injection vulnerability in Heartlogic HL-SiteManager allows remote attackers to execute arbitrary SQL commands via unknown vectors. |