Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3026▼ 51 respecto a la semana anterior

Críticas / altas1412▲ 58 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)385▼ 125 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-22523	Modificada	Alta (7.6)	0.81%	—	Microfocus Verastream Host Integrator	22/7/2021	17/6/2026	XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions.
CVE-2021-22522	Modificada	Alta (7.1)	0.62%	—	Microfocus Verastream Host Integrator	22/7/2021	17/6/2026	Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version version 7.8 Update 1 and earlier versions. The vulnerability could allow disclosure of confidential data.
CVE-2020-11842	Modificada	Alta (7.5)	1.1%	—	Microfocus Verastream Host Integrator	4/5/2020	17/6/2026	Information disclosure vulnerability in Micro Focus Verastream Host Integrator (VHI) product, affecting versions earlier than 7.8 Update 1 (7.8.49 or 7.8.0.49). The vulnerability allows an unauthenticated attackers to view information they may not have been authorized to view.
CVE-2019-11654	Modificada	Alta (7.5)	2.6%	—	Microfocus Verastream Host Integrator	23/8/2019	17/6/2026	Path traversal vulnerability in Micro Focus Verastream Host Integrator (VHI), versions 7.7 SP2 and earlier, The vulnerability allows remote unauthenticated attackers to read arbitrary files.
CVE-2013-3626	Modificada	Alta (9.3)	2.8%	—	Attachmate Verastream Host Integrator	6/11/2013	16/6/2026	Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator (VHI) 6.0 through 7.5 SP 1 HF 1 allows remote attackers to upload and execute arbitrary files via a crafted message.