Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Multiple Vendors" — 8999 resultados ✕ Limpiar búsqueda
13,971
Total alertas
3188
Críticas
10511
Altas
8
Ransomware
1038
Esta semana
RSS
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60584] Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: CSV…
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: CSV Management). The supported version that is affected is 6.5.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized access to critical data …
nvdaltovulnerabilidad CVSS 7.6 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60570] Vulnerability in Oracle GoldenGate (component: Libraries). Supported versions that are affected are…
Vulnerability in Oracle GoldenGate (component: Libraries). Supported versions that are affected are 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle GoldenGate executes to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate. CVSS 3.1 Base Score 7.8 (Confidenti…
nvdaltovulnerabilidad CVSS 7.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-60542] Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (c…
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Business Process Management Suite. While the vulnerability is in Oracle Business Pro…
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60499] Vulnerability in the JD Edwards EnterpriseOne Solution Advisor product of Oracle JD Edwards (compone…
Vulnerability in the JD Edwards EnterpriseOne Solution Advisor product of Oracle JD Edwards (component: Solution Advisor). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Solution Advisor. Successful attacks of this vulnerability can result in takeover of JD Edwards…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60492] Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component…
Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component: OW HR PR Foundation). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne HCM Foundation. Successful attacks of this vulnerability can result in unauthorized ability to…
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60493] Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edward…
Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Human Resources Management. Successful attacks of this vulnerability can result in tak…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60494] Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component…
Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne General Ledger. Successful attacks of this vulnerability can result in unauthorized ability to ca…
nvdaltovulnerabilidad CVSS 7.0 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60495] Vulnerability in the JD Edwards EnterpriseOne Requirements Planning product of Oracle JD Edwards (co…
Vulnerability in the JD Edwards EnterpriseOne Requirements Planning product of Oracle JD Edwards (component: Requirements Planning). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Requirements Planning. Successful attacks of this vulnerability can result in tak…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60496] Vulnerability in the JD Edwards EnterpriseOne Advanced Pricing - Procurement product of Oracle JD Ed…
Vulnerability in the JD Edwards EnterpriseOne Advanced Pricing - Procurement product of Oracle JD Edwards (component: Advanced Pricing). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Advanced Pricing - Procurement. Successful attacks of this vulnerability can …
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60497] Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component…
Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne CRM Foundation. Successful attacks of this vulnerability can result in takeover of JD Edwards E…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60498] Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edward…
Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Human Resources Management. Successful attacks of this vulnerability can result in…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60489] Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component…
Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne CRM Foundation. Successful attacks of this vulnerability can result in takeover of JD Edwards Enter…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60490] Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component…
Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne CRM Foundation. Successful attacks of this vulnerability can result in takeover of JD Edwards Enter…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60440] Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa…
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Service Delivery Platform. While the vulnerability is in Service Delivery Platform, attacks may significant…
nvdaltovulnerabilidad CVSS 7.7 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-60441] Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa…
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Service Delivery Platform. Successful attacks of this vulnerability can result in takeover of Service …
nvdcriticovulnerabilidad CVSS 9.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-60442] Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa…
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Service Delivery Platform. Successful attacks of this vulnerability can result in takeover of Service …
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60398] Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate Microservices). Supported versions…
Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate Microservices). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate. CVSS 3.1 Bas…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-60364] Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (compo…
Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Weblogic Server Proxy Plug-in. Successful attack…
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-60365] Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (compo…
Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Weblogic Server Proxy Plug-in. While the vulnerability is in O…
nvdcriticovulnerabilidad CVSS 10.0 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-60340] Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite (component: Enterpris…
Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite (component: Enterprise Command Center). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Project Costing. Successful attacks of this vulnerability can result in takeover of Oracle Project Costing.…
nvdaltovulnerabilidad CVSS 7.2 NVD