Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Oracle" — 1660 resultados ✕ Limpiar búsqueda
22,162
Total alertas
4698
Críticas
16876
Altas
8
Ransomware
1045
Esta semana
RSS
Alta × Limpiar todo ×
M Alto vulnerabilidad
21/07/2026
[CVE-2026-46999] Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c…
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework). Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in u…
nvdaltovulnerabilidad CVSS 7.0 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-47004] Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c…
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in tak…
nvdaltovulnerabilidad CVSS 8.8 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-47005] Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c…
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in ta…
nvdaltovulnerabilidad CVSS 7.2 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-46990] Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c…
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result…
nvdaltovulnerabilidad CVSS 7.3 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-46992] Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c…
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result…
nvdaltovulnerabilidad CVSS 8.8 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-46993] Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c…
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. While the vulnerability is in Oracle Enterprise Manager Base Pl…
nvdaltovulnerabilidad CVSS 8.2 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-46995] Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c…
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in takeover …
nvdaltovulnerabilidad CVSS 8.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
O Alto vulnerabilidad
21/07/2026
[CVE-2026-46996] Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c…
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthor…
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-46981] Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applicat…
Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Mobile). Supported versions that are affected are 2.5.0.1.0-2.5.0.1.17, 2.5.0.2.0-2.5.0.2.11, 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.8 and 25.12.0.0.0-25.12.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle U…
nvdaltovulnerabilidad CVSS 7.2 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-46987] Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c…
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. While the vulnerability is in Oracle Enterprise M…
nvdaltovulnerabilidad CVSS 7.7 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-46988] Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c…
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in take…
nvdaltovulnerabilidad CVSS 7.2 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-46941] Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Main…
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management. Successful attacks of this vulnerability can result in takeover of Oracle Cost Management. CVSS 3.…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-46943] Vulnerability in the Oracle Retail EFTLink product of Oracle Retail Applications (component: Core/Pl…
Vulnerability in the Oracle Retail EFTLink product of Oracle Retail Applications (component: Core/Plugin). Supported versions that are affected are 21.0.0-25.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Retail EFTLink. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modificati…
nvdaltovulnerabilidad CVSS 7.4 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-46954] Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Data Remo…
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Data Removal Tool). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Human Resources. Successful attacks of this vulnerability can result in takeover of Oracle Human Resources. CVSS 3.…
nvdaltovulnerabilidad CVSS 7.2 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-35287] Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.…
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application Testing Suite a…
nvdaltovulnerabilidad CVSS 7.5 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
21/07/2026
[CVE-2026-46923] Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Su…
Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Public Sector Financials (International). While the vulnerability is in Oracle Public Sector…
nvdaltovulnerabilidad CVSS 8.0 NVD
O Alto vulnerabilidad
15/07/2026
[CVE-2026-46817] Vulnerabilidad explotada activamente en Oracle E-Business Suite
CISA confirma explotación activa de una vulnerabilidad en Oracle E-Business Suite. No se ha confirmado uso en campañas de ransomware conocidas. Fecha límite para aplicar parche según directiva CISA: 2026-07-18.
oracleexplotación activavulnerabilidad CISA KEV
M Alto vulnerabilidad
30/06/2026
[CVE-2026-56300] Capgo before 12.128.2 contains unauthenticated security definer RPC functions get_user_id and get_or…
Capgo before 12.128.2 contains unauthenticated security definer RPC functions get_user_id and get_org_perm_for_apikey that expose API key validity oracles and user UUID disclosure. Unauthenticated attackers using the public API key can validate leaked keys, enumerate users and apps, and determine permission levels, significantly increasing the actionability of compromised credentials.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
21/06/2026
[CVE-2026-56242] Capgo before 12.128.2 contains an unauthenticated security definer RPC function get_identity_apikey_…
Capgo before 12.128.2 contains an unauthenticated security definer RPC function get_identity_apikey_only that returns the owning user_id for supplied API keys, creating an API key validity oracle and user identity disclosure primitive. Attackers can call this endpoint with valid or invalid API keys to confirm key validity and map keys to user identifiers, then chain results into other exposed RPCs…
nvdaltovulnerabilidad CVSS 7.5 NVD
O Alto vulnerabilidad
17/06/2026
[CVE-2026-46970] Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal …
Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HR Intelligence. Successful attacks of this vulnerability can result in takeover of Oracle HR Intelligence. CVSS …
nvdaltovulnerabilidad CVSS 7.2 NVD