Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3064▲ 561 respecto a la semana anterior

Críticas / altas1461▲ 283 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▲ 175 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-12285	Modificada	Media (5.3)	37%	—	Cisco Prime Network Analysis Module	19/10/2017	17/6/2026	A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system, aka Directory Traversal. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests…
CVE-2016-1391	Modificada	Alta (8.8)	1.6%	—	Cisco Prime Network Analysis Module Software Cisco Prime Virtual Network Analysis Module Software	4/6/2016	17/6/2026	Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(2) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(2) allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21889.
CVE-2016-1390	Modificada	Alta (7.8)	0.35%	—	Cisco Prime Network Analysis Module Software Cisco Prime Virtual Network Analysis Module Software	4/6/2016	17/6/2026	Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) allow local users to obtain root access via crafted CLI input, aka Bug ID CSCuy21892.
CVE-2016-1388	Modificada	Crítica (9.8)	1.7%	—	Cisco Network Analysis Module Cisco Prime Network Analysis Module Software Cisco Prime Virtual Network Analysis Module Software	3/6/2016	17/6/2026	Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882.
CVE-2016-1370	Modificada	Media (5.3)	2.1%	—	Cisco Network Analysis Module Software	3/6/2016	17/6/2026	Cisco Prime Network Analysis Module (NAM) before 6.2(1-b) miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of service (mond process crash and monitoring outage) via crafted IPv6 packets, aka Bug ID CSCuy37324.
CVE-2015-0656	Modificada	Media (4.3)	1.4%	—	Cisco Network Analysis Module Firmware	4/3/2015	17/6/2026	Cross-site scripting (XSS) vulnerability in the login page in Cisco Network Analysis Module (NAM) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCum81269.
CVE-2007-1467	Modificada	Baja (3.5)	1.2%	—	Cisco ACS Solution Engine Ciscoworks Cisco IP Communicator Cisco Meetingplace+14	16/3/2007	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified…
CVE-2007-1257	Modificada	Alta (10)	7.0%	—	Cisco Network Analysis Module Cisco Catalyst 6000 Ws-svc-nam-1 Cisco Catalyst 6000 Ws-svc-nam-2 Cisco Catalyst 6000 Ws-x6380-nam+6	3/3/2007	16/6/2026	The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.