Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2568▼ 304 respecto a la semana anterior

Críticas / altas1352▲ 100 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

11 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-45529	Analizada	Alta (7.1)	0.36%	—	Sscms Siteserver CMS	27/5/2025	17/6/2026	An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET request to /cms/templates/templatesAssetsEditor.
CVE-2023-2862	Modificada	Media (6.1)	0.56%	—	Sscms Siteserver CMS	24/5/2023	17/6/2026	A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to…
CVE-2022-44299	Modificada	Media (4.9)	0.83%	—	Sscms Siteserver CMS	16/2/2023	17/6/2026	SiteServerCMS 7.1.3 sscms has a file read vulnerability.
CVE-2022-44298	Modificada	Crítica (9.8)	0.74%	—	Sscms Siteserver CMS	27/1/2023	17/6/2026	SiteServer CMS 7.1.3 is vulnerable to SQL Injection.
CVE-2022-44297	Modificada	Crítica (9.8)	0.97%	—	Sscms Siteserver CMS	26/1/2023	17/6/2026	SiteServer CMS 7.1.3 has a SQL injection vulnerability the background.
CVE-2022-30349	Modificada	Media (6.1)	0.68%	—	Sscms Siteserver CMS	2/6/2022	17/6/2026	siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).
CVE-2021-42656	Modificada	Media (5.4)	0.70%	—	Sscms Siteserver CMS	24/5/2022	17/6/2026	SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability.
CVE-2021-42655	Modificada	Alta (8.8)	1.2%	—	Sscms Siteserver CMS	24/5/2022	17/6/2026	SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.
CVE-2021-42654	Modificada	Crítica (9.8)	1.7%	—	Sscms Siteserver CMS	24/5/2022	17/6/2026	SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute arbitrary code.
CVE-2022-28118	Modificada	Crítica (9.8)	2.8%	—	Sscms Siteserver CMS	3/5/2022	9/7/2026	SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.
CVE-2019-11401	Modificada	Alta (7.2)	2.8%	—	Siteserver CMS	22/4/2019	17/6/2026	A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the "as" substring is deleted.