// threat_intelligence_dashboard
Dashboard de Amenazas
Vulnerabilidades activamente explotadas según el catálogo CISA KEV (Known Exploited Vulnerabilities)
▶ ¿Cómo se calcula el nivel de amenaza global?
El nivel de amenaza global mostrado en la barra de navegación se calcula en base al número de CVEs activamente explotados publicados en el catálogo CISA KEV (Known Exploited Vulnerabilities) durante las últimas horas:
- 🟢 BAJA — 0 CVEs nuevos en el feed reciente
- 🟡 MEDIA — 1 a 2 CVEs nuevos activamente explotados
- 🟠 ALTA — 3 a 4 CVEs nuevos activamente explotados
- 🔴 CRÍTICA — 5 o más CVEs nuevos activamente explotados
Fuente: CISA Known Exploited Vulnerabilities Catalog — actualizado cada hora.
14
CVEs añadidos este mes
1543
Total KEV catalogados
10
Vendors afectados
// cves_añadidos_este_mes
| CVE | Producto | Criticidad | Añadido |
|---|---|---|---|
| CVE-2025-47813 | Wing FTP Server Wing FTP Server | MEDIA | 2026-03-16 |
| CVE-2026-3910 | Google Chromium V8 | ALTA | 2026-03-13 |
| CVE-2026-3909 | Google Skia | ALTA | 2026-03-13 |
| CVE-2025-68613 | n8n n8n | CRÍTICA | 2026-03-11 |
| CVE-2021-22054 | Omnissa Workspace One UEM | ALTA | 2026-03-09 |
| CVE-2025-26399 | SolarWinds Web Help Desk | CRÍTICA | 2026-03-09 |
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) | ALTA | 2026-03-09 |
| CVE-2017-7921 | Hikvision Multiple Products | CRÍTICA | 2026-03-05 |
| CVE-2021-22681 | Rockwell Multiple Products | CRÍTICA | 2026-03-05 |
| CVE-2023-43000 | Apple Multiple Products | ALTA | 2026-03-05 |
// top_vendors_afectados
14
6
5
4
4
3
3
3
3
2
// catalogo_kev_completo
| CVE ID | Producto | CVSS |
|---|---|---|
| CVE-2023-24955 | Microsoft SharePoint Server | ALTA |
| CVE-2019-7256 | Nice Linear eMerge E3-Series | CRÍTICA |
| CVE-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) | CRÍTICA |
| CVE-2023-48788 | Fortinet FortiClient EMS | CRÍTICA |
| CVE-2024-27198 | JetBrains TeamCity | CRÍTICA |
| CVE-2024-23225 | Apple Multiple Products | ALTA |
| CVE-2024-23296 | Apple Multiple Products | ALTA |
| CVE-2023-21237 | Android Pixel | MEDIA |
| CVE-2021-36380 | Sunhillo SureLine | CRÍTICA |
| CVE-2024-21338 | Microsoft Windows | ALTA |
| CVE-2023-29360 | Microsoft Streaming Service | ALTA |
| CVE-2024-1709 | ConnectWise ScreenConnect | CRÍTICA |
| CVE-2020-3259 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | ALTA |
| CVE-2024-21410 | Microsoft Exchange Server | CRÍTICA |
| CVE-2024-21412 | Microsoft Windows | ALTA |
| CVE-2024-21351 | Microsoft Windows | ALTA |
| CVE-2023-43770 | Roundcube Webmail | MEDIA |
| CVE-2024-21762 | Fortinet FortiOS | CRÍTICA |
| CVE-2023-4762 | Google Chromium V8 | ALTA |
| CVE-2022-48618 | Apple Multiple Products | ALTA |
| CVE-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons | ALTA |
| CVE-2023-22527 | Atlassian Confluence Data Center and Server | CRÍTICA |
| CVE-2024-23222 | Apple Multiple Products | ALTA |
| CVE-2023-34048 | VMware vCenter Server | CRÍTICA |
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core | CRÍTICA |