CWE-77 CVEs · Protected by Waratek · Medium

Protected by Waratek 2 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%

Critical 0 0.0% High 0 0.0% Medium 2 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 2 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%

Exploited 0 0.0% Working exploit published 1 50.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 1 50.0%

split by StatusSeverityProtectionExploit maturity peak 1 / year

20111 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 20120 20130 20140 20150 20160 20170 20180 20190 20200 20210 20221 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1

201120122013201420152016201720182019202020212022

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2021-38542	Medium	2022-01-04	Protected by Waratek	No public exploit	Apache James prior to release 3.6.1 is vulnerable to a buffering attack relying on the use of the STARTTLS command. This can result in Man-in -the-middle command injection attacks, leading potentially to leakage of sensible information.
CVE-2011-1571	Medium	2011-05-07	Protected by Waratek	Working exploit published	Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2021-38542

Medium

2022-01-04

Protected by Waratek

No public exploit

Apache James prior to release 3.6.1 is vulnerable to a buffering attack relying on the use of the STARTTLS command. This can result in Man-in -the-middle command injection attacks, leading potentially to leakage of sensible information.

CVE-2011-1571

Medium

2011-05-07

Protected by Waratek

Working exploit published

Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.