Vulnerabilities
Summary — last 7 days
New vulnerabilities2,546▼ 402 vs. last week
Critical / high1,312▲ 29 vs. last week
New active exploitation (KEV)6▼ 5 vs. last week
Unscored (no CVSS)59▼ 467 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (6.1) | 0.85% | — | IBM Forms Server | 3/15/2018 | 6/17/2026 | Cross-site scripting (XSS) vulnerability in the Webform Framework API in IBM Forms Server 4.0.x, 8.0.x, 8.1, and 8.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 110006. | |
| Modified | Medium (4) | 38% | — | Microsoft Forms ServerMicrosoft GrooveMicrosoft Groove Data Bridge ServerMicrosoft Groove Management Server+6 | 9/15/2011 | 6/16/2026 | Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Office Groove Data Bridge Server 2007 SP2, Office Groove Management Server 2007 SP2, Groove Server 2010 Gold and SP1, Windows SharePoint… |