Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2015-6416	Modificada	Media (4.3)	1.8%	—	Cisco Unified WEB AND E-mail Interaction Manager	14/12/2015	17/6/2026	Cross-site scripting (XSS) vulnerability in Cisco Unified Email Interaction Manager and Unified Web Interaction Manager 11.0(1) allows remote attackers to inject arbitrary web script or HTML a crafted URL, aka Bug ID CSCuw24479.
CVE-2015-6255	Modificada	Media (4.3)	2.3%	—	Cisco Unified WEB AND E-mail Interaction Manager	19/8/2015	17/6/2026	Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-Mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via a crafted chat message, aka Bug ID CSCuo89051.
CVE-2015-4299	Modificada	Media (5.5)	2.5%	—	Cisco Unified WEB AND E-mail Interaction Manager	19/8/2015	17/6/2026	Cisco Unified Web and E-Mail Interaction Manager 9.0(2) improperly performs authorization, which allows remote authenticated users to remove default messaging-queue system folders via unspecified vectors, aka Bug ID CSCuo89046.
CVE-2015-4298	Modificada	Media (6.5)	2.5%	—	Cisco Unified WEB AND E-mail Interaction Manager	19/8/2015	17/6/2026	Cisco Unified Web and E-Mail Interaction Manager 9.0(2) and 11.0(1) improperly performs authorization, which allows remote authenticated users to read or write to stored data via unspecified vectors, aka Bug ID CSCuo89056.
CVE-2015-0753	Modificada	Media (6.8)	1.8%	—	Cisco Unified WEB AND E-mail Interaction Manager	29/5/2015	17/6/2026	SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028.
CVE-2015-0655	Modificada	Media (4.3)	1.8%	—	Cisco Unified WEB AND E-mail Interaction Manager	28/2/2015	17/6/2026	Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remote attackers to inject arbitrary web script or HTML via vectors related to a POST request, aka Bug ID CSCus74184.
CVE-2014-2194	Modificada	Media (6.8)	1.2%	—	Cisco Unified WEB AND E-mail Interaction Manager	20/5/2014	17/6/2026	system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity.
CVE-2014-2193	Modificada	Media (4.3)	0.96%	—	Cisco Unified WEB AND E-mail Interaction Manager	20/5/2014	17/6/2026	Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084.
CVE-2014-2192	Modificada	Media (4.3)	1.1%	—	Cisco Unified WEB AND E-mail Interaction Manager	20/5/2014	17/6/2026	Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj43033.