VRT Sign in

Oracle Retail Applications RIB Kernal (Apache Commons FileUpload) CVEs

2 CVEs, 1 protected by Waratek

Look up CVE IDs Status Exploitation Severity

Reset

Overview 2 matches · 1 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5

2matches 1protected50.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%

Protected by Waratek 1 50.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 50.0%

Critical 1 50.0% High 1 50.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 1 50.0% partly blocked 0 0.0% not blocked 1 50.0% not established 0 0.0% unrecorded 0 0.0%

Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 2 100.0%

split by StatusSeverityProtectionExploit maturity peak 1 / year

20161 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 20170 20180 20190 20200 20210 20220 20231 No exploit published1 High1 not blocked1 No public exploit1

20162017201820192020202120222023

2 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2023-24998	High	2023-02-20	No exploit published	No public exploit	Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option (FileUploadBase#setFileCountMax) is not enabled by default and must be explicitly configured.
CVE-2016-1000031	Critical	2016-10-25	Protected by Waratek	No public exploit	Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2023-24998

High

2023-02-20

No exploit published

No public exploit

Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option (FileUploadBase#setFileCountMax) is not enabled by default and must be explicitly configured.

CVE-2016-1000031

Critical

2016-10-25

Protected by Waratek

No public exploit

Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution