org.python CVEs

VRT 391,192 CVEs tracked · 15,442 in RASP scope · data as of 20 hours ago

Description contains RASP scope Status Exploitation Severity

Reset

Overview 2 matches · 1 in RASP scope · 1 protected · 0 KEV · 0 public PoC · 0 CISA SSVC · 0 EPSS ≥ 0.5 · 0 disputed

2matches 1in RASP scope50.0% 1protected50.0% 0KEV0.0% 0public PoC0.0% 0CISA SSVC0.0% 0EPSS ≥ 0.50.0% 0disputed0.0%

Critical 1 50.0% High 0 0.0% Medium 1 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%

Protected by RASP 1 50.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% No fix identified 0 0.0% Mitigated by environment configuration 0 0.0% Queued for review 0 0.0% Not applicable 0 0.0% Out of RASP scope 1 50.0% Rejected 0 0.0%

blocked by ARMR today 1 50.0% not blocked 1 50.0% not established 0 0.0% unrecorded 0 0.0%

Exploited in the wild 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 2 100.0%

split by SeverityStatusProtectionExploit maturity peak 1 / quarter

Q1 15Q2 15Q3 15Q4 15Q1 16Q2 16Q3 16Q4 16Q1 17Q2 17Q3 17

2 matches CSV JSON

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2016-4000	Critical	2017-07-06	Protected by RASP	No public exploit	Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.
CVE-2013-2027	Medium	2015-02-13	Out of RASP scope	No public exploit	Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2016-4000

Critical

2017-07-06

Protected by RASP

No public exploit

Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.

CVE-2013-2027

Medium

2015-02-13

Out of RASP scope

No public exploit

Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.