Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

18 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-49508	Modificada	Media (6.5)	1.0%	—	Yetiforce Customer Relationship Management	16/2/2024	17/6/2026	Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license parameter in the LibraryLicense.php component.
CVE-2022-3002	Modificada	Media (5.4)	0.70%	—	Yetiforce Customer Relationship Management	6/10/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-3005	Modificada	Media (5.4)	0.63%	—	Yetiforce Customer Relationship Management	20/9/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-3004	Modificada	Media (5.4)	0.63%	—	Yetiforce Customer Relationship Management	20/9/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-3000	Modificada	Media (5.4)	0.63%	—	Yetiforce Customer Relationship Management	20/9/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-2924	Modificada	Media (5.4)	0.78%	—	Yetiforce Customer Relationship Management	20/9/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.3.
CVE-2022-2829	Modificada	Media (5.4)	0.83%	—	Yetiforce Customer Relationship Management	23/8/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-2890	Modificada	Media (5.4)	0.87%	—	Yetiforce Customer Relationship Management	22/8/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-1340	Modificada	Media (5.4)	0.49%	—	Yetiforce Customer Relationship Management	22/8/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-2885	Modificada	Media (4.8)	0.47%	—	Yetiforce Customer Relationship Management	21/8/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-1411	Modificada	Media (6.1)	0.76%	—	Yetiforce Customer Relationship Management	5/5/2022	17/6/2026	Unrestructed file upload in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Attacker can send malicious files to the victims is able to retrieve the stored data from the web application without that data being made safe to render in the browser and steals victim's cookie leads to account takeover.
CVE-2022-0269	Modificada	Alta (8)	0.53%	—	Yetiforce Customer Relationship Management	24/1/2022	17/6/2026	Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0.
CVE-2021-4121	Modificada	Media (6.1)	0.76%	—	Yetiforce Customer Relationship Management	16/12/2021	17/6/2026	yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4117	Modificada	Media (4.3)	0.71%	—	Yetiforce Customer Relationship Management	15/12/2021	17/6/2026	yetiforcecrm is vulnerable to Business Logic Errors
CVE-2021-4116	Modificada	Media (5.4)	0.46%	—	Yetiforce Customer Relationship Management	15/12/2021	17/6/2026	yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4111	Modificada	Media (4.3)	0.62%	—	Yetiforce Customer Relationship Management	15/12/2021	17/6/2026	yetiforcecrm is vulnerable to Business Logic Errors
CVE-2021-4107	Modificada	Media (6.1)	0.78%	—	Yetiforce Customer Relationship Management	14/12/2021	17/6/2026	yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4092	Modificada	Media (4.3)	0.40%	—	Yetiforce Customer Relationship Management	11/12/2021	17/6/2026	yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)