WaratekVRT Sign in

High CWE-255 CVEs

5 CVEs

Reset
More filters (1)
Columns
CWE CWE-255✕
Overview 5 matches · 0 protected · 0 exploited · 0 CISA KEV · 1 public PoC · 1 EPSS ≥ 0.5
5matches 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 1public PoC20.0% 1EPSS ≥ 0.520.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 20.0% No exploit published 4 80.0%
Critical 0 0.0% High 5 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 5 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 1 20.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 4 80.0%
split by peak 1 / quarter
No exploit published: 4Mitigation candidate: 1 High: 5 not blocked: 5 No public exploit: 4Working exploit published: 1
Q1 081 No exploit published1 High1 not blocked1 No public exploit1 Q2 080 Q3 081 No exploit published1 High1 not blocked1 No public exploit1 Q4 080 Q1 090 Q2 091 No exploit published1 High1 not blocked1 No public exploit1 Q3 090 Q4 091 Mitigation candidate1 High1 not blocked1 Working exploit published1 Q1 100 Q2 100 Q3 100 Q4 100 Q1 110 Q2 110 Q3 110 Q4 110 Q1 120 Q2 120 Q3 120 Q4 120 Q1 130 Q2 130 Q3 131 No exploit published1 High1 not blocked1 No public exploit1
Q1 08Q3 08Q1 09Q3 09Q1 10Q3 10Q1 11Q3 11Q1 12Q3 12Q1 13Q3 13
5 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2013-4031 High 2013-08-09 No exploit published No public exploit The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, which makes it easier for remote attackers to perform power-on, power-off, or reboot actions, or add or modify accounts, via unspecified vectors.
CVE-2009-3548 High 2009-11-12 Mitigation candidate Working exploit published The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.
CVE-2009-1000 High 2009-04-15 No exploit published No public exploit The Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 uses default passwords for unspecified "FND Applications Users (not DB users)," which has unknown impact and attack vectors.
CVE-2008-3235 High 2008-07-21 No exploit published No public exploit Unspecified vulnerability in the PropFilePasswordEncoder utility in the Security component in IBM WebSphere Application Server (WAS) 5.1 before 5.1.1.19 has unknown impact and attack vectors.
CVE-2008-0901 High 2008-02-22 No exploit published No public exploit BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed password is successful or not.