Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,181
Total alertas
4701
Críticas
16892
Altas
8
Ransomware
1055
Esta semana
RSS
Alta × cwe-306 × Limpiar todo ×
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60621] Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run…
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security). The supported version that is affected is 9.2.26.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in takeover of JD Edwards Enterpris…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60623] Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported v…
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to c…
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60600] Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (compone…
Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise FIN Project Costing executes to compromise PeopleSoft Enterprise FIN Project Costing. Successful attacks requ…
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60602] Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (compo…
Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (component: Billing). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student Financials. Successful attacks of this vulnerability can result in takeover of PeopleSoft E…
nvdaltovulnerabilidad CVSS 8.8 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-60604] Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (compone…
Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in takeover of PeopleSoft En…
nvdaltovulnerabilidad CVSS 7.5 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-60605] Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (componen…
Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Higher Ed Statistics Agency - UK HESA). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student Records. Successful attacks of this vulnerability can result in…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60586] Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported v…
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products (scope change). …
nvdaltovulnerabilidad CVSS 7.7 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60580] Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (…
Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). The supported version that is affected is V16. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Enterprise Command Center Framework executes to compromise Oracle Enterprise…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60583] Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Ins…
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.5.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in takeover of Oracle Transportation Management.…
nvdaltovulnerabilidad CVSS 8.8 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-60543] Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). …
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CVSS 3.1 Base Sco…
nvdaltovulnerabilidad CVSS 8.1 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-60544] Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). …
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete…
nvdaltovulnerabilidad CVSS 8.2 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-60545] Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MF…
Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Managed File Transfer. Successful attacks of this vulnerability can result in takeover of Oracle…
nvdaltovulnerabilidad CVSS 8.8 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-60549] Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MF…
Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Managed File Transfer. Successful attacks of this vulnerability can result in takeover of Oracle…
nvdaltovulnerabilidad CVSS 8.8 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-60539] Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Bu…
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CV…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60499] Vulnerability in the JD Edwards EnterpriseOne Solution Advisor product of Oracle JD Edwards (compone…
Vulnerability in the JD Edwards EnterpriseOne Solution Advisor product of Oracle JD Edwards (component: Solution Advisor). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Solution Advisor. Successful attacks of this vulnerability can result in takeover of JD Edwards…
nvdaltovulnerabilidad CVSS 8.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60493] Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edward…
Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Human Resources Management. Successful attacks of this vulnerability can result in tak…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60495] Vulnerability in the JD Edwards EnterpriseOne Requirements Planning product of Oracle JD Edwards (co…
Vulnerability in the JD Edwards EnterpriseOne Requirements Planning product of Oracle JD Edwards (component: Requirements Planning). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Requirements Planning. Successful attacks of this vulnerability can result in tak…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60496] Vulnerability in the JD Edwards EnterpriseOne Advanced Pricing - Procurement product of Oracle JD Ed…
Vulnerability in the JD Edwards EnterpriseOne Advanced Pricing - Procurement product of Oracle JD Edwards (component: Advanced Pricing). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Advanced Pricing - Procurement. Successful attacks of this vulnerability can …
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60497] Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component…
Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne CRM Foundation. Successful attacks of this vulnerability can result in takeover of JD Edwards E…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60498] Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edward…
Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Human Resources Management. Successful attacks of this vulnerability can result in…
nvdaltovulnerabilidad CVSS 7.5 NVD