Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2797▼ 203 respecto a la semana anterior

Críticas / altas1352▲ 28 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)255▼ 266 respecto a la semana anterior

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-45674	Analizada	Baja (3.3)	0.15%	—	IBM Security Verify Bridge Directory Sync IBM Security Verify Gateway FOR Radius IBM Security Verify Gateway FOR Windows Login	22/2/2025	17/6/2026	IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores potentially sensitive information in log files that could be read by a local user.
CVE-2024-45673	Modificada	Media (5.5)	0.14%	—	IBM Security Verify Bridge Directory Sync IBM Security Verify Gateway FOR Radius IBM Security Verify Gateway FOR Windows Login	21/2/2025	17/6/2026	IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores user credentials in configuration files which can be read by a local user.
CVE-2020-4405	Modificada	Media (4.3)	0.92%	—	IBM Verify Gateway	27/7/2020	17/6/2026	IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log files. IBM X-Force ID: 179484.
CVE-2020-4400	Modificada	Alta (7.5)	1.6%	—	IBM Verify Gateway	22/7/2020	17/6/2026	IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 179478.
CVE-2020-4399	Modificada	Media (6.5)	1.1%	—	IBM Verify Gateway	22/7/2020	17/6/2026	IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a denial of service against the server. IBM X-Force ID: 179476.
CVE-2020-4397	Modificada	Media (5.9)	0.65%	—	IBM Verify Gateway	22/7/2020	17/6/2026	IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an attacker using man in the middle techniques. IBM X-Force ID: 179428.
CVE-2020-4385	Modificada	Crítica (9.8)	1.2%	—	IBM Verify Gateway	22/7/2020	17/6/2026	IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 179266.
CVE-2020-4372	Modificada	Alta (7.8)	0.29%	—	IBM Verify Gateway	22/7/2020	17/6/2026	IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 179009
CVE-2020-4371	Modificada	Baja (3.3)	0.31%	—	IBM Verify Gateway	22/7/2020	17/6/2026	IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code that could be used aid a local user in further attacks against the system. IBM X-Force ID: 179008.
CVE-2020-4369	Modificada	Media (5.5)	0.21%	—	IBM Verify Gateway	22/7/2020	17/6/2026	IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores highly sensitive information in cleartext that could be obtained by a user. IBM X-Force ID: 179004.