WaratekVRT Sign in

Oracle Fusion Middleware WebCenter Sites CVEs with a working exploit

2 CVEs

Reset
More filters (1)
Columns
Oracle product: Oracle Fusion Middleware / WebCenter Sites✕
Overview 2 matches · 0 protected · 0 exploited · 0 CISA KEV · 1 EPSS ≥ 0.5
2matches 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 1EPSS ≥ 0.550.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 2 100.0% No exploit published 0 0.0%
Critical 0 0.0% High 1 50.0% Medium 1 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 2 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 2 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 1 / month
Mitigation candidate: 2 Medium: 1High: 1 not blocked: 2 Working exploit published: 2
Apr 131 Mitigation candidate1 Medium1 not blocked1 Working exploit published1 May 130 Jun 130 Jul 130 Aug 130 Sep 130 Oct 130 Nov 130 Dec 130 Jan 140 Feb 140 Mar 140 Apr 141 Mitigation candidate1 High1 not blocked1 Working exploit published1
Apr 13Jun 13Aug 13Oct 13Dec 13Feb 14Apr 14
2 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2014-0050 High 2014-04-01 Mitigation candidate Working exploit published MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.
CVE-2013-1509 Medium 2013-04-17 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.0, and 11.1.1.6.1 allows remote authenticated users to affect integrity via unknown vectors related to WebCenter Sites.