WaratekVRT Sign in
Reset
More filters (2)
Columns
Published to 2012-06-30✕CISA KEV listed✕
Overview 5 matches · 4 protected · 3 public PoC · 4 EPSS ≥ 0.5
5matches 4protected80.0% 3public PoC60.0% 4EPSS ≥ 0.580.0%
Protected by Waratek 4 80.0% Rule in development 0 0.0% Mitigation candidate 1 20.0% No exploit published 0 0.0%
Critical 2 40.0% High 2 40.0% Medium 1 20.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 4 80.0% partly blocked 0 0.0% not blocked 0 0.0% not established 1 20.0% unrecorded 0 0.0%
Exploited 5 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 2 / year
Mitigation candidate: 1Protected by Waratek: 4 Medium: 1High: 2Critical: 2 not established: 1blocked by ARMR today: 4 Exploited: 5
20061 Protected by Waratek1 High1 blocked by ARMR today1 Exploited1 20070 20080 20090 20102 Protected by Waratek2 High1 Medium1 blocked by ARMR today2 Exploited2 20110 20122 Protected by Waratek1 Mitigation candidate1 Critical2 blocked by ARMR today1 not established1 Exploited2
2006200720082009201020112012
5 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2012-1710 Critical 2012-05-03 Mitigation candidate Exploited Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1709.
CVE-2012-0391 Critical 2012-01-08 Protected by Waratek Exploited The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a crafted parameter.
CVE-2010-1871 High 2010-08-05 Protected by Waratek Exploited JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.
CVE-2010-0738 Medium 2010-04-28 Protected by Waratek Exploited The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.
CVE-2006-1547 High 2006-03-30 Protected by Waratek Exploited ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to elements in the CommonsMultipartRequestHandler implementation and BeanUtils.