Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior
Críticas / altas1284▼ 85 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior
26 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 2.0% | — | Microfocus Sitescope | 28/5/2021 | 17/6/2026 | Execute arbitrary code vulnerability in Micro Focus SiteScope product, affecting versions 11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018.11(11.60), 2019.02(11.70), 2019.05(11.80), 2019.08(11.90), 2019.11(11.91), 2020.05(11.92), 2020.10(11.93). The vulnerability could allow remote attackers to execute arbitrary… | |
| Modificada | Alta (7.5) | 6.4% | — | HP Asset ManagerHP Asset Manager Cloudsystem ChargebackHP Sitescope | 4/2/2020 | 17/6/2026 | An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem Chargeback 9.40, which could let a remote malicious user obtain sensitive information. This is the TLS vulnerability… | |
| Modificada | Alta (7.5) | 4.8% | — | HP Sitescope | 15/2/2018 | 17/6/2026 | A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found. | |
| Modificada | Alta (7.8) | 0.66% | — | HP Sitescope | 15/2/2018 | 17/6/2026 | A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found. | |
| Modificada | Media (5.5) | 0.65% | — | HP Sitescope | 15/2/2018 | 17/6/2026 | A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found. | |
| Modificada | Media (5.5) | 0.65% | — | HP Sitescope | 15/2/2018 | 17/6/2026 | A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found. | |
| Modificada | Crítica (9.8) | 2.6% | — | HP Sitescope | 30/9/2017 | 17/6/2026 | An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data. | |
| Modificada | Alta (8.7) | 3.5% | — | HP Sitescope | 25/5/2015 | 17/6/2026 | Unspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x before 11.30.521 allows remote authenticated users to gain privileges via unknown vectors, aka ZDI-CAN-2567. | |
| Modificada | Media (5.5) | 2.0% | — | HP Sitescope | 2/2/2015 | 17/6/2026 | Unspecified vulnerability in HP SiteScope 11.1x and 11.2x allows remote authenticated users to gain privileges via unknown vectors. | |
| Modificada | Alta (7.5) | 4.9% | — | HP Sitescope | 7/7/2014 | 17/6/2026 | Unspecified vulnerability in HP SiteScope 11.1x through 11.13 and 11.2x through 11.24 allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-2140. | |
| Modificada | Alta (9.4) | 3.4% | — | HP Sitescope | 11/3/2014 | 17/6/2026 | Unspecified vulnerability in the loadFileContents function in the SOAP implementation in HP SiteScope 10.1x, 11.1x, and 11.21 allows remote attackers to read arbitrary files or cause a denial of service via unknown vectors, aka ZDI-CAN-2084. | |
| Modificada | Alta (7.5) | 71% | — | HP Sitescope | 4/11/2013 | 16/6/2026 | The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765. | |
| Modificada | Alta (10) | 69% | — | HP Sitescope | 31/7/2013 | 16/6/2026 | Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678. | |
| Modificada | Alta (7.5) | 5.6% | — | HP Sitescope | 25/9/2012 | 16/6/2026 | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1472. | |
| Modificada | Alta (10) | 8.6% | — | HP Sitescope | 25/9/2012 | 16/6/2026 | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1465. | |
| Modificada | Alta (10) | 8.6% | — | HP Sitescope | 25/9/2012 | 16/6/2026 | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1464. | |
| Modificada | Alta (10) | 40% | — | HP Sitescope | 25/9/2012 | 16/6/2026 | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463. | |
| Modificada | Alta (10) | 40% | — | HP Sitescope | 25/9/2012 | 16/6/2026 | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462. | |
| Modificada | Alta (10) | 60% | — | HP Sitescope | 25/9/2012 | 16/6/2026 | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461. | |
| Modificada | Alta (8.3) | 4.1% | — | HP Sitescope | 29/7/2011 | 16/6/2026 | Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to hijack web sessions via unspecified vectors. | |
| Modificada | Media (4.3) | 3.2% | — | HP Sitescope | 29/7/2011 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | |
| Modificada | Media (4.3) | 2.1% | — | HP Sitescope | 3/5/2011 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue. | |
| Modificada | Media (4.3) | 3.3% | — | HP Sitescope | 3/5/2011 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | |
| Modificada | Media (4.3) | 1.6% | — | HP Sitescope | 21/10/2008 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the management interface in HP SiteScope 9.0 build 911 allows remote attackers to inject arbitrary web script or HTML via an SNMP trap message. | |
| Modificada | Media (4) | 1.5% | — | HP Mercury Sitescope | 3/10/2006 | 16/6/2026 | Mercury SiteScope 8.2 (8.1.2.0) allows remote authenticated users to cause a denial of service (loss of connectivity to the classic interface) via attempted HTML injection into the "new monitor description" field. |