Overview 202 matches · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
202matches
0exploited0.0%
0CISA KEV0.0%
0public PoC0.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
202
100.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
blocked by ARMR today
202
100.0%
partly blocked
0
0.0%
not blocked
0
0.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
202
100.0%
split by
peak 39 / year
20062
Protected by Waratek2
High1
Medium1
blocked by ARMR today2
No public exploit2
20070
20080
20091
Protected by Waratek1
High1
blocked by ARMR today1
No public exploit1
20100
20110
20121
Protected by Waratek1
Medium1
blocked by ARMR today1
No public exploit1
20138
Protected by Waratek8
High3
Medium4
Low1
blocked by ARMR today8
No public exploit8
20145
Protected by Waratek5
High1
Medium4
blocked by ARMR today5
No public exploit5
20156
Protected by Waratek6
High2
Medium4
blocked by ARMR today6
No public exploit6
20168
Protected by Waratek8
Critical1
High4
Medium3
blocked by ARMR today8
No public exploit8
201727
Protected by Waratek27
Critical1
High11
Medium12
Low3
blocked by ARMR today27
No public exploit27
201839
Protected by Waratek39
Critical6
High11
Medium18
Low4
blocked by ARMR today39
No public exploit39
201932
Protected by Waratek32
Critical9
High5
Medium7
Low11
blocked by ARMR today32
No public exploit32
202025
Protected by Waratek25
High3
Medium9
Low13
blocked by ARMR today25
No public exploit25
202112
Protected by Waratek12
High1
Medium8
Low3
blocked by ARMR today12
No public exploit12
202216
Protected by Waratek16
Critical1
High1
Medium10
Low4
blocked by ARMR today16
No public exploit16
20238
Protected by Waratek8
High1
Medium2
Low5
blocked by ARMR today8
No public exploit8
20245
Protected by Waratek5
Medium2
Low3
blocked by ARMR today5
No public exploit5
20253
Protected by Waratek3
High1
Medium2
blocked by ARMR today3
No public exploit3
20264
Protected by Waratek4
High4
blocked by ARMR today4
No public exploit4
20062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2006-1548 | Medium | 2006-03-30 | Protected by Waratek | No public exploit | Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting error message. |
| CVE-2006-1546 | High | 2006-03-30 | Protected by Waratek | No public exploit | Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to bypass validation via a request with a 'org.apache.struts.taglib.html.Constants.CANCEL' parameter, which causes the action to be canceled but would not be detected from applications that do not use the isCancelled check. |