Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2585▼ 302 respecto a la semana anterior

Críticas / altas1355▲ 99 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

11 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-11884	Aplazada	Baja (2.3)	0.22%	—	Opentext Ucmdb^AI	19/11/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in opentext uCMDB allows Stored XSS. The vulnerability could allow an attacker has high level access to UCMDB to create or update data with malicious scripts This issue affects uCMDB: 24.4.
CVE-2022-26323	Aplazada	Alta (8.7)	0.33%	—	Opentext Operations Bridge Manager^AI Opentext Operations Bridge Suite^AI Opentext Ucmdb^AI	17/4/2025	17/6/2026	Incorrect Use of Privileged APIs vulnerability in OpenText™ Operations Bridge Manager, OpenText™ Operations Bridge Suite (Containerized), OpenText™ UCMDB ( Classic and Containerized) allows Privilege Escalation. The vulnerability could allow authenticated attackers to elevate user privileges. This issue affects…
CVE-2018-18593	Modificada	Alta (7.5)	8.8%	—	HP Ucmdb Configuration Manager	31/12/2018	17/6/2026	Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities…
CVE-2018-6491	Modificada	Crítica (9.8)	0.99%	—	Microfocus Ucmdb Configuration Manager	24/4/2018	17/6/2026	Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege.
CVE-2018-6488	Modificada	Crítica (9.8)	1.8%	—	Microfocus Ucmdb Configuration Manager	22/2/2018	17/6/2026	Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution.
CVE-2017-8947	Modificada	Crítica (9.8)	30%	—	HP Ucmdb Configuration Manager	15/2/2018	17/6/2026	A Remote Code Execution vulnerability in HPE UCMDB version v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 was found.
CVE-2017-14354	Modificada	Media (6.1)	1.2%	—	HP Ucmdb Foundation Software	5/10/2017	17/6/2026	A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33 could be remotely exploited to allow cross-site scripting.
CVE-2017-14353	Modificada	Alta (8.8)	4.7%	—	HP Ucmdb Foundation Software	5/10/2017	17/6/2026	A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution.
CVE-2017-14352	Modificada	Media (6.1)	0.91%	—	HP Ucmdb Configuration Manager	30/9/2017	17/6/2026	A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow cross-site scripting.
CVE-2017-14351	Modificada	Crítica (9.8)	4.4%	—	HP Ucmdb Configuration Manager	30/9/2017	17/6/2026	A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow code execution.
CVE-2015-6862	Modificada	Alta (8.4)	1.4%	—	HP Ucmdb Browser	8/1/2016	17/6/2026	HPE UCMDB Browser before 4.02 allows remote attackers to obtain sensitive information or bypass intended access restrictions via unspecified vectors.