WaratekVRT Sign in

Oracle Utilities Applications CVEs with a working exploit

3 CVEs, 3 protected by Waratek

Reset
More filters (1)
Columns
Oracle product: Oracle Utilities Applications✕
Overview 3 matches · 0 exploited · 0 CISA KEV · 2 EPSS ≥ 0.5
3matches 0exploited0.0% 0CISA KEV0.0% 2EPSS ≥ 0.566.7%
Protected by Waratek 3 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 1 33.3% High 1 33.3% Medium 1 33.3% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 3 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 3 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 1 / year
Protected by Waratek: 3 Medium: 1High: 1Critical: 1 blocked by ARMR today: 3 Working exploit published: 3
20141 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 20150 20160 20171 Protected by Waratek1 Critical1 blocked by ARMR today1 Working exploit published1 20180 20190 20200 20210 20220 20230 20241 Protected by Waratek1 High1 blocked by ARMR today1 Working exploit published1
20142015201620172018201920202021202220232024
3 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2024-38819 High 2024-12-19 Protected by Waratek Working exploit published Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.
CVE-2017-5645 Critical 2017-04-17 Protected by Waratek Working exploit published In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
CVE-2014-3004 Medium 2014-06-11 Protected by Waratek Working exploit published The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XML document.