CWE-284 CVEs · Mitigation candidate

VRT Sign in

Look up CVE IDs Status Exploitation Severity

Reset

Overview 3 matches · 0 protected · 1 exploited · 0 CISA KEV · 2 public PoC · 0 EPSS ≥ 0.5

3matches 0protected0.0% 1exploited33.3% 0CISA KEV0.0% 2public PoC66.7% 0EPSS ≥ 0.50.0%

Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 3 100.0% No exploit published 0 0.0%

Critical 1 33.3% High 1 33.3% Medium 1 33.3% Low 0 0.0% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 3 100.0% not established 0 0.0% unrecorded 0 0.0%

Exploited 1 33.3% Working exploit published 2 66.7% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%

split by StatusSeverityProtectionExploit maturity peak 1 / year

20171 Mitigation candidate1 Critical1 not blocked1 Exploited1 20180 20190 20200 20210 20220 20231 Mitigation candidate1 Medium1 not blocked1 Working exploit published1 20241 Mitigation candidate1 High1 not blocked1 Working exploit published1

20172018201920202021202220232024

3 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2024-3656	High	2024-10-09	Mitigation candidate	Working exploit published	A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise.
CVE-2023-29922	Medium	2023-04-19	Mitigation candidate	Working exploit published	PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.
CVE-2016-4800	Critical	2017-04-13	Mitigation candidate	Exploited	The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2024-3656

High

2024-10-09

Mitigation candidate

Working exploit published

A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise.

CVE-2023-29922

Medium

2023-04-19

Mitigation candidate

Working exploit published

PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.

CVE-2016-4800

Critical

2017-04-13

Mitigation candidate

Exploited

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes.