Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2860▼ 165 respecto a la semana anterior

Críticas / altas1382▲ 50 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)272▼ 254 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2020-36926	Analizada	Media (6.9)	0.57%	—	Smartertools Smartertrack	16/1/2026	17/6/2026	SmarterTrack 7922 contains an information disclosure vulnerability in the Chat Management search form that reveals agent identification details. Attackers can access the vulnerable /Management/Chat/frmChatSearch.aspx endpoint to retrieve agents' first and last names along with their unique identifiers.
CVE-2022-24387	Modificada	Alta (7.2)	2.1%	—	Smartertools Smartertrack	14/3/2022	17/6/2026	With administrator or admin privileges the application can be tricked into overwriting files in app_data/Config folder, e.g. the systemsettings.xml file. THis is possible in SmarterTrack v100.0.8019.14010
CVE-2022-24386	Modificada	Media (6.1)	0.71%	—	Smartertools Smartertrack	14/3/2022	17/6/2026	Stored XSS in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.
CVE-2022-24385	Modificada	Media (6.5)	0.88%	—	Smartertools Smartertrack	14/3/2022	17/6/2026	A Direct Object Access vulnerability in SmarterTools SmarterTrack leads to information disclosure This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.
CVE-2022-24384	Modificada	Media (6.1)	4.1%	—	Smartertools Smartertrack	14/3/2022	17/6/2026	Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.
CVE-2009-4995	Modificada	Media (4.3)	0.85%	—	Smartertools Smartertrack	25/8/2010	16/6/2026	Cross-site scripting (XSS) vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the email address field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2009-4994	Modificada	Media (4.3)	1.0%	—	Smartertools Smartertrack	25/8/2010	16/6/2026	Cross-site scripting (XSS) vulnerability in frmKBSearch.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the search parameter.