WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Oracle product: Oracle Fusion Middleware / Oracle WebLogic Server✕
Overview 13 matches · 12 in Waratek scope · 3 protected · 1 exploited · 0 CISA KEV · 5 public PoC · 2 EPSS ≥ 0.5
13matches 12in Waratek scope92.3% 3protected23.1% 1exploited7.7% 0CISA KEV0.0% 5public PoC38.5% 2EPSS ≥ 0.515.4%
Protected by Waratek 3 23.1% Rule in development 0 0.0% Mitigation candidate 1 7.7% No exploit published 8 61.5% Outside Waratek scope 1 7.7% Not applicable 0 0.0% Withdrawn CVE 0 0.0%
Critical 1 7.7% High 2 15.4% Medium 8 61.5% Low 2 15.4% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 3 23.1% partly blocked 0 0.0% not blocked 10 76.9% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 7.7% Working exploit published 3 23.1% Proof of concept only 1 7.7% Forecast only 0 0.0% No public exploit 8 61.5%
split by peak 7 / year
Outside Waratek scope: 1No exploit published: 8Mitigation candidate: 1Protected by Waratek: 3 Low: 2Medium: 8High: 2Critical: 1 not blocked: 10blocked by ARMR today: 3 No public exploit: 8Proof of concept only: 1Working exploit published: 3Exploited: 1
20117 Mitigation candidate1 No exploit published5 Outside Waratek scope1 High1 Medium5 Low1 not blocked7 Working exploit published2 No public exploit5 20120 20132 Protected by Waratek2 High1 Medium1 blocked by ARMR today2 Exploited1 Proof of concept only1 20140 20153 No exploit published3 Medium2 Low1 not blocked3 No public exploit3 20160 20171 Protected by Waratek1 Critical1 blocked by ARMR today1 Working exploit published1
2011201220132014201520162017
13 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2017-3248 Critical 2017-01-27 Protected by Waratek Working exploit published Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0 and 12.2.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS v3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).
CVE-2015-4744 Low 2015-07-16 No exploit published No public exploit Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via unknown vectors related to Java Server Faces.
CVE-2015-2623 Medium 2015-07-16 No exploit published No public exploit Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2, and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0, allows remote attackers to affect integrity via unknown vectors related to Java Server Faces.
CVE-2014-6569 Medium 2015-01-21 No exploit published No public exploit Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality via vectors related to CIE Related Components.
CVE-2013-2186 High 2013-10-28 Protected by Waratek Proof of concept only The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.
CVE-2013-3827 Medium 2013-10-16 Protected by Waratek Exploited Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.
CVE-2011-5035 Medium 2011-12-30 Outside Waratek scope Working exploit published Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, aka Oracle security ticket S0104869.
CVE-2011-2320 Medium 2011-10-18 No exploit published No public exploit Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services.
CVE-2011-2319 Medium 2011-10-18 No exploit published No public exploit Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality, related to JMS.
CVE-2011-2318 Low 2011-10-18 No exploit published No public exploit Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows local users to affect confidentiality, related to WLS Security.
CVE-2010-4453 Medium 2011-01-19 No exploit published No public exploit Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect integrity via unknown vectors related to Servlet Container.
CVE-2010-4437 Medium 2011-01-19 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.
CVE-2010-3510 High 2011-01-19 No exploit published No public exploit Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.3, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Node Manager.