Overview 102 matches · 100 protected · 4 exploited · 0 CISA KEV · 11 public PoC · 4 EPSS ≥ 0.5
Protected by Waratek
100
98.0%
Rule in development
2
2.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
blocked by ARMR today
100
98.0%
partly blocked
0
0.0%
not blocked
2
2.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 18 / year
20051
Protected by Waratek1
Medium1
blocked by ARMR today1
Working exploit published1
20061
Protected by Waratek1
Medium1
blocked by ARMR today1
No public exploit1
20070
20080
20090
20101
Protected by Waratek1
Medium1
blocked by ARMR today1
Working exploit published1
20110
20122
Protected by Waratek2
Medium2
blocked by ARMR today2
Exploited1
No public exploit1
20134
Protected by Waratek4
Medium4
blocked by ARMR today4
No public exploit4
20145
Protected by Waratek5
Medium5
blocked by ARMR today5
Working exploit published1
No public exploit4
20154
Protected by Waratek4
Medium4
blocked by ARMR today4
No public exploit4
20163
Protected by Waratek3
Medium3
blocked by ARMR today3
No public exploit3
201714
Protected by Waratek14
Medium14
blocked by ARMR today14
Working exploit published2
No public exploit12
201818
Protected by Waratek18
Medium18
blocked by ARMR today18
No public exploit18
20199
Protected by Waratek9
Medium9
blocked by ARMR today9
Proof of concept only2
No public exploit7
20209
Protected by Waratek9
Medium9
blocked by ARMR today9
No public exploit9
202111
Protected by Waratek11
Medium11
blocked by ARMR today11
Exploited2
Proof of concept only1
No public exploit8
202211
Protected by Waratek11
Medium11
blocked by ARMR today11
Proof of concept only1
No public exploit10
20233
Protected by Waratek3
Medium3
blocked by ARMR today3
Proof of concept only1
No public exploit2
20242
Protected by Waratek2
Medium2
blocked by ARMR today2
No public exploit2
20254
Protected by Waratek2
Rule in development2
Medium4
blocked by ARMR today2
not blocked2
Exploited1
Working exploit published1
No public exploit2
20052007200920112013201520172019202120232025
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2006-1548 | Medium | 2006-03-30 | Protected by Waratek | No public exploit | Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting error message. |
| CVE-2005-3745 | Medium | 2005-11-22 | Protected by Waratek | Working exploit published | Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message. |