Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,509
Total alertas
3066
Críticas
10171
Altas
8
Ransomware
1810
Esta semana
RSS
cwe-269 × Limpiar todo ×
O Alto vulnerabilidad
21/07/2026
[CVE-2026-61188] Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply …
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation). The supported version that is affected is 6.2.4. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks of this vulnerability can result…
nvdaltovulnerabilidad CVSS 7.5 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-61179] Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply …
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks of this vulnerabilit…
nvdaltovulnerabilidad CVSS 8.8 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-61180] Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply …
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks of this vulnerabilit…
nvdaltovulnerabilidad CVSS 8.8 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-61168] Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The su…
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 8.8 (Confidentiality, Inte…
nvdaltovulnerabilidad CVSS 8.8 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-61149] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of th…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-61154] Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com…
Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search Platform Services. Successful attacks of this vulnerability can result in takeover of Oracle …
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-61141] Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Afforda…
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Affordable Care Act). Supported versions that are affected are 12.2.7-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Benefits. Successful attacks of this vulnerability can result in takeover of Oracle Advanced Benefits…
nvdaltovulnerabilidad CVSS 7.5 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-61146] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. While the vulner…
nvdcriticovulnerabilidad CVSS 9.9 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-61120] Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operat…
Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS (US) executes to compromise Oracle HRMS (US). Successful attacks of this vulnerability can result in takeover of Orac…
nvdaltovulnerabilidad CVSS 7.0 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-61121] Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). S…
Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (UK). Successful attacks of this vulnerability can result in takeover of Oracle HRMS (UK). CVSS 3.1 Base Score 8.8 (Confiden…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-61126] Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communic…
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0.0-15.0.1.0.0 and 15.1.0.0.0-15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Billing and Revenue Management executes to compromise…
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-61127] Vulnerability in the Oracle Communications Service Catalog and Design product of Oracle Communicatio…
Vulnerability in the Oracle Communications Service Catalog and Design product of Oracle Communications (component: Solution Designer). Supported versions that are affected are 8.0.0.7.0-8.3.0.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Service Catalog and Design. Successful attacks of this vulnerability can…
nvdaltovulnerabilidad CVSS 8.8 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-61110] Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch)…
Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in takeover of Oracle Applications DBA. CVSS 3.1 Base S…
nvdaltovulnerabilidad CVSS 8.8 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-61114] Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component…
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in takeover of Oracle Appli…
nvdaltovulnerabilidad CVSS 7.5 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-61099] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in takeover …
nvdaltovulnerabilidad CVSS 8.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
O Alto vulnerabilidad
21/07/2026
[CVE-2026-61107] Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal…
Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in takeover of Oracle Applications DBA. CV…
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-61091] Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communic…
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Billing and Revenue Management executes to compro…
nvdaltovulnerabilidad CVSS 7.8 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-61094] Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replica…
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.…
nvdaltovulnerabilidad CVSS 7.2 NVD
O Alto vulnerabilidad
21/07/2026
[CVE-2026-61098] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in takeover …
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-61090] Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Miscel…
Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Project Foundation executes to compromise Oracle Project Foundation. Successful attacks of this vulnerability can result …
nvdaltovulnerabilidad CVSS 7.8 NVD