WaratekVRT Sign in

Oracle Commerce Platform (OWASP Java HTML Sanitizer ) CVEs with no public exploit

2 CVEs, 2 protected by Waratek

Reset
More filters (1)
Columns
Oracle product: Oracle Commerce / Platform (OWASP Java HTML Sanitizer )✕
Overview 2 matches · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
2matches 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 2 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 1 50.0% High 0 0.0% Medium 1 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 2 100.0%
split by peak 1 / month
Protected by Waratek: 2 Medium: 1Critical: 1 blocked by ARMR today: 2 No public exploit: 2
Oct 211 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 Nov 210 Dec 210 Jan 220 Feb 220 Mar 220 Apr 221 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1
Oct 21Nov 21Dec 21Jan 22Feb 22Mar 22Apr 22
2 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2022-22950 Medium 2022-04-01 Protected by Waratek No public exploit n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.
CVE-2021-42575 Critical 2021-10-18 Protected by Waratek No public exploit The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.