VRT 391,192 CVEs tracked · 15,442 in RASP scope · data as of 19 hours ago
Reset
More filters (2)
Columns
Published from 2007-01-01✕Published to 2007-12-31✕
Overview 9 matches, all in RASP scope · 1 protected · 0 KEV · 1 public PoC · 0 CISA SSVC · 0 EPSS ≥ 0.5 · 0 disputed
9matches, all in RASP scope 1protected11.1% 0KEV0.0% 1public PoC11.1% 0CISA SSVC0.0% 0EPSS ≥ 0.50.0% 0disputed0.0%
Critical 0 0.0% High 0 0.0% Medium 0 0.0% Low 9 100.0% None 0 0.0% Unknown 0 0.0%
Protected by RASP 1 11.1% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 2 22.2% No fix identified 6 66.7% Mitigated by environment configuration 0 0.0% Queued for review 0 0.0% Not applicable 0 0.0% Out of RASP scope 0 0.0% Rejected 0 0.0%
blocked by ARMR today 1 11.1% not blocked 8 88.9% not established 0 0.0% unrecorded 0 0.0%
Exploited in the wild 0 0.0% Working exploit published 1 11.1% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 8 88.9%
split by peak 4 / month
Unknown: 0None: 0Low: 9Medium: 0High: 0Critical: 0 Rejected: 0Out of RASP scope: 0Not applicable: 0Queued for review: 0Mitigated by environment configuration: 0No fix identified: 6No exploit published: 2Mitigation candidate: 0Rule in development: 0Protected by RASP: 1 unrecorded: 0not established: 0not blocked: 8blocked by ARMR today: 1 No public exploit: 8Forecast only: 0Proof of concept only: 0Working exploit published: 1Exploited in the wild: 0 January 2007: 4 CVEs February 2007: 0 CVEs March 2007: 0 CVEs April 2007: 0 CVEs May 2007: 1 CVE June 2007: 1 CVE July 2007: 0 CVEs August 2007: 0 CVEs September 2007: 0 CVEs October 2007: 3 CVEs
Jan 07Feb 07Mar 07Apr 07May 07Jun 07Jul 07Aug 07Sep 07Oct 07
9 matches CSV JSON
CVE Severity Published▾ Status Exploitation Description
CVE-2007-5461 Low 2007-10-15 Protected by RASP Working exploit published Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.
CVE-2007-5273 Low 2007-10-08 No fix identified No public exploit Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232.
CVE-2007-5238 Low 2007-10-06 No fix identified No public exploit Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to obtain sensitive information (the Java Web Start cache location) via an untrusted application, aka "three vulnerabilities."
CVE-2007-2450 Low 2007-06-14 No exploit published No public exploit Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.
CVE-2007-1358 Low 2007-05-10 No exploit published No public exploit Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616".
CVE-2007-0296 Low 2007-01-17 No fix identified No public exploit Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.13, 8.47.11, and 8.48.06 has unknown impact and attack vectors in PeopleTools, aka PSE02.
CVE-2007-0294 Low 2007-01-17 No fix identified No public exploit Unspecified vulnerability in Oracle Enterprise Manager 10.2.0.1 has unknown impact and attack vectors related to Database Cloning & Data Guard Management, aka EM06.
CVE-2007-0282 Low 2007-01-17 No fix identified No public exploit Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.2 and 10.1.2.0.0, and Collaboration Suite 9.0.4.2 has unknown impact and attack vectors related to the Oracle Process Mgmt & Notification component, aka OPMN02.
CVE-2007-0275 Low 2007-01-17 No fix identified No public exploit Cross-site scripting (XSS) vulnerability in Oracle Reports Web Cartridge (RWCGI60) in the Workflow Cartridge component, as used in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; Collaboration Suite 10.1.2; and Oracle E-Business Suite and Applications 11.5.10CU2; allows remote authenticated users to inject arbitrary HTML or web script via the genuser parameter to rwcgi60, aka OWF01.