Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (4.8) | 0.28% | — | Cisco Desk Phone 9841 With Multiplatform FirmwareCisco Desk Phone 9851 With Multiplatform FirmwareCisco Desk Phone 9861 With Multiplatform FirmwareCisco Desk Phone 9871 With Multiplatform Firmware+19 | 6/11/2024 | 17/6/2026 | A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users. This vulnerability exists because the… | |
| Analizada | Media (4.8) | 0.28% | — | Cisco Desk Phone 9841 With Multiplatform FirmwareCisco Desk Phone 9851 With Multiplatform FirmwareCisco Desk Phone 9861 With Multiplatform FirmwareCisco Desk Phone 9871 With Multiplatform Firmware+19 | 6/11/2024 | 17/6/2026 | A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users. This vulnerability exists because the… | |
| Analizada | Alta (7.5) | 0.81% | — | Cisco IP Phone 6821 With Multiplatform FirmwareCisco IP Phone 6841 With Multiplatform FirmwareCisco IP Phone 6851 With Multiplatform FirmwareCisco IP Phone 6861 With Multiplatform Firmware+11 | 1/5/2024 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to a lack of authentication for specific endpoints of the web-based management interface on an affected… |