Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2989▼ 87 respecto a la semana anterior

Críticas / altas1458▲ 97 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2013-0672	Modificada	Baja (3.5)	1.2%	—	Siemens Wincc TIA Portal	21/3/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to inject arbitrary web script or HTML via unspecified data.
CVE-2013-0671	Modificada	Media (4)	2.3%	—	Siemens Wincc TIA Portal	21/3/2013	16/6/2026	Directory traversal vulnerability in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to read HMI web-application source code and user-defined scripts via a crafted URL.
CVE-2013-0670	Modificada	Media (4.3)	1.5%	—	Siemens Wincc TIA Portal	21/3/2013	16/6/2026	CRLF injection vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.
CVE-2013-0669	Modificada	Media (4)	1.8%	—	Siemens Wincc TIA Portal	21/3/2013	16/6/2026	The HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to cause a denial of service (daemon crash) via a crafted HTTP request.
CVE-2013-0668	Modificada	Media (4.3)	1.5%	—	Siemens Wincc TIA Portal	21/3/2013	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in the HMI web application in Siemens WinCC (TIA Portal) 11 allow remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVE-2013-0667	Modificada	Media (4.3)	1.5%	—	Siemens Wincc TIA Portal	21/3/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVE-2011-4515	Modificada	Media (4.6)	0.38%	—	Siemens Wincc TIA Portal	21/3/2013	16/6/2026	Siemens WinCC (TIA Portal) 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain sensitive information by leveraging (1) physical access or (2) Sm@rt Server access.