WaratekVRT Sign in

Low CWE-255 CVEs

6 CVEs

Reset
More filters (1)
Columns
CWE CWE-255✕
Overview 6 matches · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
6matches 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 6 100.0%
Critical 0 0.0% High 0 0.0% Medium 0 0.0% Low 6 100.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 6 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 6 100.0%
split by peak 2 / quarter
No exploit published: 6 Low: 6 not blocked: 6 No public exploit: 6
Q3 091 No exploit published1 Low1 not blocked1 No public exploit1 Q4 090 Q1 100 Q2 101 No exploit published1 Low1 not blocked1 No public exploit1 Q3 100 Q4 100 Q1 110 Q2 110 Q3 110 Q4 110 Q1 120 Q2 120 Q3 121 No exploit published1 Low1 not blocked1 No public exploit1 Q4 120 Q1 131 No exploit published1 Low1 not blocked1 No public exploit1 Q2 130 Q3 130 Q4 130 Q1 140 Q2 142 No exploit published2 Low2 not blocked2 No public exploit2
Q4 09Q2 10Q4 10Q2 11Q4 11Q2 12Q4 12Q2 13Q4 13Q2 14
6 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2013-6372 Low 2014-05-08 No exploit published No public exploit The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file.
CVE-2014-0085 Low 2014-04-17 No exploit published No public exploit JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local users. Note: this description has been updated; previous text mistakenly identified the source of the flaw as Zookeeper. Previous text: Apache Zookeeper logs cleartext admin passwords, which allows local users to obtain sensitive information by reading the log.
CVE-2012-0034 Low 2013-02-05 No exploit published No public exploit The NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0, Web Platform (EWP) 5.1.2 and 5.2.0, and BRMS Platform before 5.3.1 logs the username and password in cleartext when an exception is thrown, which allows local users to obtain sensitive information by reading the log file.
CVE-2009-5066 Low 2012-08-13 No exploit published No public exploit twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments.
CVE-2010-0769 Low 2010-04-01 No exploit published No public exploit IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectionFactory objects, which allows local users to discover a KeyRingPassword password by reading a cleartext field in the resources.xml file.
CVE-2009-2087 Low 2009-08-13 No exploit published No public exploit The Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial of service (deployment failure) via unspecified vectors.