Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2019-13163	Modificada	Media (5.9)	0.60%	—	Fujitsu Gp7000f Firmware Fujitsu Primepower Firmware Fujitsu GPS Firmware Fujitsu Sparc Enterprise M3000 Firmware+36	7/2/2020	17/6/2026	The Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application Development Cycle Manager V10 and other versions, Interstage Application Server V12 and other versions, Interstage Business Application Manager V2 and other versions, Interstage Information Integrator V11 and other versions,…
CVE-2015-2808	Modificada	Baja (3.7)	74%	—	Oracle Communications Application Session Controller Oracle Communications Policy Management Oracle Http Server Oracle Integrated Lights OUT Manager Firmware+57	1/4/2015	17/6/2026	The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally…
CVE-2013-2566	Modificada	Media (5.9)	84%	—	Oracle Communications Application Session Controller Oracle Http Server Oracle Integrated Lights OUT Manager Firmware Fujitsu Sparc Enterprise M3000 Firmware+12	15/3/2013	16/6/2026	The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.