Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,434
Total alertas
3054
Críticas
10108
Altas
8
Ransomware
1777
Esta semana
RSS
Crítica × cwe-284 × Limpiar todo ×
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-61223] Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communicat…
Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security). Supported versions that are affected are 8.2 and 8.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP/IP to compromise Oracle Communications Converged Application Server. While the vulnerability is in Oracle Communications…
nvdcriticovulnerabilidad CVSS 9.0 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-61203] Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Exp…
Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Expenses). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Expenses. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modific…
nvdcriticovulnerabilidad CVSS 9.4 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-61204] Vulnerability in the PeopleSoft Enterprise FIN Program Management product of Oracle PeopleSoft (comp…
Vulnerability in the PeopleSoft Enterprise FIN Program Management product of Oracle PeopleSoft (component: Primavera Integration). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Program Management. Successful attacks require human interaction from a person other t…
nvdcriticovulnerabilidad CVSS 9.0 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-61207] Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component:…
Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component: Manage Requisition Status). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. While the vulnerability is in PeopleSoft Enterprise SCM eProcurement, att…
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-61211] Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affecte…
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Execute DBMS_CLOUD privilege with network access via Oracle Net to compromise RDBMS. While the vulnerability is in RDBMS, attacks may significantly impact additional products (scope change).…
nvdcriticovulnerabilidad CVSS 9.9 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-61197] Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg…
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can result in unauthorized creation, deletion…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-61201] Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (componen…
Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (component: Common Objects). The supported version that is affected is 9.2.23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CRM Common Objects. While the vulnerability is in PeopleSoft Enterprise CRM Common Objects, att…
nvdcriticovulnerabilidad CVSS 9.0 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-61184] Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply …
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks of this vulnerabili…
nvdcriticovulnerabilidad CVSS 9.1 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-61186] Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon…
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized creation, dele…
nvdcriticovulnerabilidad CVSS 9.4 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-61174] Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: I…
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Product Lifecycle Analytics executes to compromise Oracle Product Lifecycle Analytics. While the vulnerability is in…
nvdcriticovulnerabilidad CVSS 9.0 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-61167] Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The su…
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 9.8 (Confidentiality, Int…
nvdcriticovulnerabilidad CVSS 9.8 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-61171] Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The su…
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-61156] Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com…
Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Commerce Guided Search Platform Services. Successful attacks of this vulnerability can result in unauthorized crea…
nvdcriticovulnerabilidad CVSS 9.1 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-61161] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful a…
nvdcriticovulnerabilidad CVSS 9.8 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-61153] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of t…
nvdcriticovulnerabilidad CVSS 9.1 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-61155] Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com…
Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search Platform Services. Successful attacks of this vulnerability can result in unauthorized acces…
nvdcriticovulnerabilidad CVSS 9.1 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-61140] Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente…
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 B…
nvdcriticovulnerabilidad CVSS 9.8 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-61145] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful atta…
nvdcriticovulnerabilidad CVSS 9.8 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-61146] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. While the vulner…
nvdcriticovulnerabilidad CVSS 9.9 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-61130] Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Applicat…
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or c…
nvdcriticovulnerabilidad CVSS 9.1 NVD