Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2619▼ 461 respecto a la semana anterior

Críticas / altas1277▼ 72 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)235▼ 274 respecto a la semana anterior

17 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-20967	Analizada	Alta (8.8)	1.1%	—	Microsoft System Center Operations Manager	10/3/2026	17/6/2026	Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.
CVE-2025-27743	Analizada	Alta (7.8)	0.88%	—	Microsoft System Center Data Protection Manager Microsoft System Center Operations Manager Microsoft System Center Orchestrator Microsoft System Center Service Manager+1	8/4/2025	17/6/2026	Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.
CVE-2024-21334	Analizada	Crítica (9.8)	20%	—	Microsoft Open Management Infrastructure Microsoft System Center Operations Manager	12/3/2024	17/6/2026	Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
CVE-2024-21330	Analizada	Alta (7.8)	0.99%	—	Microsoft Azure Automation Microsoft Azure Automation Update Management Microsoft Azure Security Center Microsoft Azure Sentinel+4	12/3/2024	17/6/2026	Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
CVE-2023-36043	Modificada	Media (6.5)	1.4%	—	Microsoft System Center Operations Manager	14/11/2023	17/6/2026	Open Management Infrastructure Information Disclosure Vulnerability
CVE-2022-33640	Modificada	Alta (7.8)	0.60%	—	Microsoft Open Management Infrastructure Microsoft System Center Operations Manager	9/8/2022	17/6/2026	System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
CVE-2022-29149	Modificada	Alta (7.8)	0.92%	—	Microsoft Azure Automation State Configuration Microsoft Azure Automation Update Management Microsoft Azure Diagnostics Microsoft Azure Security Center+6	15/6/2022	17/6/2026	Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
CVE-2021-41352	Modificada	Alta (7.5)	2.9%	—	Microsoft System Center Operations Manager	13/10/2021	17/6/2026	SCOM Information Disclosure Vulnerability
CVE-2021-38649	Analizada	Alta (7.8)	2.9%	⚠ Explotación activa	Microsoft Azure Automation State Configuration Microsoft Azure Automation Update Management Microsoft Azure Diagnostics (lad)Microsoft Azure Open Management Infrastructure+7	15/9/2021	10/8/2026	Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38648	Analizada	Alta (7.8)	11%	⚠ Explotación activa	Microsoft Azure Automation State Configuration Microsoft Azure Automation Update Management Microsoft Azure Diagnostics (lad)Microsoft Azure Open Management Infrastructure+7	15/9/2021	10/8/2026	Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38647	Analizada	Crítica (9.8)	100%	⚠ Explotación activa	Microsoft Azure Automation State Configuration Microsoft Azure Automation Update Management Microsoft Azure Diagnostics (lad)Microsoft Azure Security Center+6	15/9/2021	10/8/2026	Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
CVE-2021-38645	Analizada	Alta (7.8)	2.7%	⚠ Explotación activa	Microsoft Azure Automation State Configuration Microsoft Azure Automation Update Management Microsoft Azure Diagnostics (lad)Microsoft Azure Security Center+6	15/9/2021	10/8/2026	Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-1728	Modificada	Alta (8.8)	2.0%	—	Microsoft System Center Operations Manager	25/2/2021	17/6/2026	System Center Operations Manager Elevation of Privilege Vulnerability
CVE-2020-1331	Modificada	Media (5.4)	1.3%	—	Microsoft System Center Operations Manager	9/6/2020	17/6/2026	A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially crafted web request to an affected SCOM instance, aka 'System Center Operations Manager Spoofing Vulnerability'.
CVE-2015-2420	Modificada	Media (4.3)	8.8%	—	Microsoft System Center Operations Manager	15/8/2015	17/6/2026	Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "System Center Operations Manager Web Console XSS Vulnerability."
CVE-2013-0010	Modificada	Media (4.3)	17%	—	Microsoft System Center Operations Manager	9/1/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0009.
CVE-2013-0009	Modificada	Media (4.3)	14%	—	Microsoft System Center Operations Manager	9/1/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0010.