Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3017▼ 66 respecto a la semana anterior

Críticas / altas1412▲ 56 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)381▼ 129 respecto a la semana anterior

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2012-0718	Modificada	Media (5.4)	0.76%	—	IBM Tivoli Endpoint Manager	18/2/2020	16/6/2026	IBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies.
CVE-2014-6137	Modificada	Media (4.3)	2.3%	—	IBM Tivoli Endpoint Manager	16/2/2015	17/6/2026	Cross-site scripting (XSS) vulnerability in the Relay Diagnostic page in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-6113	Modificada	Media (4.3)	0.93%	—	IBM Tivoli Endpoint Manager	16/2/2015	17/6/2026	Cross-site scripting (XSS) vulnerability in the Web Reports component in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-6140	Modificada	Alta (9.3)	6.5%	—	IBM Tivoli Endpoint Manager Mobile Device Management	6/12/2014	17/6/2026	IBM Tivoli Endpoint Manager Mobile Device Management (MDM) before 9.0.60100 uses the same secret HMAC token across different customers' installations, which allows remote attackers to execute arbitrary code via crafted marshalled Ruby objects in cookies to (1) Enrollment and Apple iOS Management Extender, (2)…
CVE-2014-3066	Modificada	Media (5)	2.4%	—	IBM Tivoli Endpoint Manager	2/7/2014	17/6/2026	IBM Tivoli Endpoint Manager 9.1 before 9.1.1088.0 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2013-0452	Modificada	Media (6.8)	0.64%	—	IBM Software USE Analysis IBM Tivoli Endpoint Manager	29/3/2013	16/6/2026	Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format (AMF) messages.
CVE-2013-0453	Modificada	Baja (3.5)	0.94%	—	IBM Tivoli Endpoint Manager	21/3/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in Web Reports in IBM Tivoli Endpoint Manager (TEM) before 8.2.1372 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVE-2012-4841	Modificada	Media (5)	1.6%	—	IBM Tivoli Endpoint Manager	29/11/2012	16/6/2026	Unspecified vulnerability in Tivoli Endpoint Manager for Remote Control Broker 8.2 before 8.2.1-TIV-TEMRC821-IF0002 allows remote attackers to cause a denial of service (resource consumption) via unknown vectors.
CVE-2012-1837	Modificada	Media (5)	1.3%	—	IBM Tivoli Endpoint Manager	22/3/2012	16/6/2026	The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
CVE-2012-0719	Modificada	Media (4.3)	1.2%	—	IBM Tivoli Endpoint Manager	22/3/2012	16/6/2026	Cross-site scripting (XSS) vulnerability in IBM Tivoli Endpoint Manager (TEM) 8 before 8.2 patch 3 allows remote attackers to inject arbitrary web script or HTML via the ScheduleParam parameter to the webreports program.