Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

18 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-7085	Aplazada	Alta (8.2)	0.39%	—	Opentext Solutions Business Manager^AI	15/1/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Solutions Business Manager (SBM) allows Stored XSS. The vulnerability could result in the exposure of private information to an unauthorized actor. This issue affects Solutions Business Manager (SBM):…
CVE-2019-18947	Modificada	Baja (3.5)	0.34%	—	Microfocus Solutions Business Manager	26/2/2021	17/6/2026	Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure.
CVE-2019-18946	Modificada	Media (4.8)	0.26%	—	Microfocus Solutions Business Manager	26/2/2021	17/6/2026	Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to session fixation.
CVE-2019-18945	Modificada	Alta (8)	0.55%	—	Microfocus Solutions Business Manager	26/2/2021	17/6/2026	Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability.
CVE-2019-18944	Modificada	Media (4.8)	0.32%	—	Microfocus Solutions Business Manager	26/2/2021	17/6/2026	Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS.
CVE-2019-18943	Modificada	Alta (8)	0.61%	—	Microfocus Solutions Business Manager	26/2/2021	17/6/2026	Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to XML External Entity Processing (XXE) on certain operations.
CVE-2019-18942	Modificada	Media (4.8)	0.32%	—	Microfocus Solutions Business Manager	26/2/2021	17/6/2026	Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to stored XSS. The application reflects previously stored user input without encoding.
CVE-2019-3477	Modificada	Media (6.1)	0.65%	—	Microfocus Solutions Business Manager	7/6/2019	17/6/2026	Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect.
CVE-2018-19644	Modificada	Media (6.1)	0.51%	—	Microfocus Solutions Business Manager	27/3/2019	17/6/2026	Reflected cross site script issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
CVE-2018-19643	Modificada	Alta (7.5)	0.80%	—	Microfocus Solutions Business Manager	27/3/2019	17/6/2026	Information leakage issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
CVE-2018-19642	Modificada	Alta (7.5)	0.70%	—	Microfocus Solutions Business Manager	27/3/2019	17/6/2026	Denial of service issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
CVE-2018-19641	Modificada	Crítica (9.8)	1.5%	—	Microfocus Solutions Business Manager	27/3/2019	17/6/2026	Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
CVE-2018-19645	Modificada	Crítica (9.8)	1.4%	—	Microfocus Solutions Business Manager	12/2/2019	17/6/2026	An Authentication Bypass issue exists in Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
CVE-2018-7682	Modificada	Media (6.5)	0.84%	—	Microfocus Solutions Business Manager	22/6/2018	17/6/2026	Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains.
CVE-2018-7683	Modificada	Alta (7.5)	1.1%	—	Microfocus Solutions Business Manager	21/6/2018	17/6/2026	Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log files.
CVE-2018-7681	Modificada	Media (4.8)	0.51%	—	Microfocus Solutions Business Manager	21/6/2018	17/6/2026	Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system.
CVE-2018-7680	Modificada	Media (6.1)	0.65%	—	Microfocus Solutions Business Manager	21/6/2018	17/6/2026	Micro Focus Solutions Business Manager versions prior to 11.4 can reflect back HTTP header values.
CVE-2018-7679	Modificada	Crítica (9.8)	2.3%	—	Microfocus Solutions Business Manager	21/6/2018	17/6/2026	Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, could lead to remote code execution.