WaratekVRT Sign in

Medium CWE-601 CVEs

105 CVEs, 5 exploited

Reset
More filters (1)
Columns
CWE CWE-601✕
Overview 105 matches · 0 protected · 5 exploited · 1 CISA KEV · 11 public PoC · 2 EPSS ≥ 0.5
105matches 0protected0.0% 5exploited4.8% 1CISA KEV1.0% 11public PoC10.5% 2EPSS ≥ 0.51.9%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 12 11.4% No exploit published 93 88.6%
Critical 0 0.0% High 0 0.0% Medium 105 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 104 99.0% not established 1 1.0% unrecorded 0 0.0%
Exploited 5 4.8% Working exploit published 6 5.7% Proof of concept only 3 2.9% Forecast only 0 0.0% No public exploit 91 86.7%
split by peak 43 / year
No exploit published: 93Mitigation candidate: 12 Medium: 105 not established: 1not blocked: 104 No public exploit: 91Proof of concept only: 3Working exploit published: 6Exploited: 5
20121 Mitigation candidate1 Medium1 not established1 Exploited1 20132 No exploit published2 Medium2 not blocked2 No public exploit2 20140 20151 No exploit published1 Medium1 not blocked1 No public exploit1 20160 20172 Mitigation candidate1 No exploit published1 Medium2 not blocked2 Working exploit published1 No public exploit1 20184 No exploit published4 Medium4 not blocked4 No public exploit4 20196 Mitigation candidate2 No exploit published4 Medium6 not blocked6 Working exploit published2 No public exploit4 20202 Mitigation candidate1 No exploit published1 Medium2 not blocked2 Exploited1 No public exploit1 20214 No exploit published4 Medium4 not blocked4 No public exploit4 20227 No exploit published7 Medium7 not blocked7 No public exploit7 202312 Mitigation candidate3 No exploit published9 Medium12 not blocked12 Working exploit published2 Proof of concept only3 No public exploit7 202410 Mitigation candidate2 No exploit published8 Medium10 not blocked10 Exploited2 No public exploit8 202511 Mitigation candidate2 No exploit published9 Medium11 not blocked11 Exploited1 Working exploit published1 No public exploit9 202643 No exploit published43 Medium43 not blocked43 No public exploit43
20122014201620182020202220242026
105 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2017-3528 Medium 2017-04-24 Mitigation candidate Working exploit published Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datepicker, etc.)). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).
CVE-2015-5210 Medium 2015-11-02 No exploit published No public exploit Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.
CVE-2013-4390 Medium 2013-10-24 No exploit published No public exploit Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the resource parameter, related to "a custom login form and XSS."
CVE-2012-6073 Medium 2013-02-24 No exploit published No public exploit Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVE-2012-0518 Medium 2012-10-16 Mitigation candidate Exploited Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.
‹ prev page 2 of 2 next ›