WaratekVRT Sign in

Medium CWE-352 CVEs with no public exploit

3 CVEs, 2 protected by Waratek

Reset
More filters (1)
Columns
CWE CWE-352✕
Overview 3 matches · 2 protected · 0 exploited · 0 CISA KEV · 0 public PoC
3matches 2protected66.7% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0%
Protected by Waratek 2 66.7% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 33.3%
Critical 0 0.0% High 0 0.0% Medium 3 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 66.7% partly blocked 0 0.0% not blocked 1 33.3% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 3 100.0% No public exploit 0 0.0%
split by peak 2 / year
No exploit published: 1Protected by Waratek: 2 Medium: 3 not blocked: 1blocked by ARMR today: 2 Forecast only: 3
20142 Protected by Waratek2 Medium2 blocked by ARMR today2 Forecast only2 20150 20160 20170 20180 20190 20200 20210 20221 No exploit published1 Medium1 not blocked1 Forecast only1
201420152016201720182019202020212022
3 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2022-28731 Medium 2022-08-04 No exploit published Forecast only A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow the attacker to modify the email associated with the attacked account, and then a reset password request from the login page.
CVE-2014-0054 Medium 2014-04-17 Protected by Waratek Forecast only The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML, aka an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4152, CVE-2013-7315, and CVE-2013-6429.
CVE-2013-6429 Medium 2014-01-26 Protected by Waratek Forecast only The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152 and CVE-2013-7315.