Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2684▼ 86 respecto a la semana anterior
Críticas / altas1444▲ 301 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 0.44% | — | Verint Workforce Optimization | 13/6/2024 | 17/6/2026 | Verint - CWE-434: Unrestricted Upload of File with Dangerous Type | |
| Modificada | Media (6.1) | 0.25% | — | Verint Workforce Optimization | 13/6/2024 | 17/6/2026 | Verint - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | |
| Modificada | Media (6.1) | 64% | — | Verint Workforce Optimization | 15/12/2021 | 9/7/2026 | Verint Workforce Optimization (WFO) 15.2.8.10048 allows XSS via the control/my_notifications NEWUINAV parameter. | |
| Analizada | Crítica (10) | 100% | ⚠ Explotación activa | Siemens 6bk1602-0aa12-0tp0 FirmwareSiemens 6bk1602-0aa22-0tp0 FirmwareSiemens 6bk1602-0aa32-0tp0 FirmwareSiemens 6bk1602-0aa42-0tp0 Firmware+139 | 10/12/2021 | 11/8/2026 | Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can… | |
| Modificada | Media (5.3) | 1.1% | — | Verint Workforce Optimization | 8/10/2021 | 17/6/2026 | Verint Workforce Optimization (WFO) 15.2.5.1033 allows HTML injection via the /wfo/control/signin username parameter. | |
| Modificada | Media (5.3) | 1.2% | — | Verint Workforce Optimization | 22/9/2020 | 9/7/2026 | Verint Workforce Optimization suite 15.1 (15.1.0.37634) has Unauthenticated Information Disclosure via API | |
| Modificada | Media (5.4) | 0.98% | — | Verint Workforce Optimization | 22/6/2020 | 17/6/2026 | Verint Workforce Optimization (WFO) 15.2 allows HTML injection via the "send email" feature. |