Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3037▲ 502 respecto a la semana anterior

Críticas / altas1448▲ 249 respecto a la semana anterior

Nueva explotación activa (KEV)8▼ 2 respecto a la semana anterior

Sin puntuar (sin CVSS)365▲ 158 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2005-4274	Modificada	Media (5)	1.3%	—	Businessobjects Webintelligence	15/12/2005	16/6/2026	Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to cause a denial of service (user account lock out) via unknown attack vectors related to "authentication mechanisms" and "form input."
CVE-2004-0533	Modificada	Baja (2.1)	0.69%	—	Businessobjects Infoview Businessobjects Webintelligence	31/12/2004	16/6/2026	Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client.
CVE-2004-0534	Modificada	Media (4.3)	1.2%	—	Businessobjects Infoview Businessobjects Webintelligence	17/9/2004	16/6/2026	Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document.
CVE-2003-1249	Modificada	Alta (7.5)	2.6%	—	Businessobjects Webintelligence	31/12/2003	16/6/2026	WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions.