WaratekVRT Sign in
Reset
More filters (1)
Columns
CWE CWE-611✕
Overview 2 matches · 0 exploited · 0 CISA KEV · 0 public PoC
2matches 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0%
Protected by Waratek 2 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 0 0.0% High 1 50.0% Medium 1 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 2 100.0% No public exploit 0 0.0%
split by peak 1 / year
Protected by Waratek: 2 Medium: 1High: 1 blocked by ARMR today: 2 Forecast only: 2
20141 Protected by Waratek1 Medium1 blocked by ARMR today1 Forecast only1 20150 20160 20170 20180 20190 20200 20211 Protected by Waratek1 High1 blocked by ARMR today1 Forecast only1
20142015201620172018201920202021
2 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2021-21659 High 2021-05-25 Protected by Waratek Forecast only Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVE-2013-6429 Medium 2014-01-26 Protected by Waratek Forecast only The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152 and CVE-2013-7315.