WaratekVRT Sign in

Kylin-server-base CVEs with no public exploit

3 CVEs, 3 protected by Waratek

Reset
More filters (1)
Columns
Product kylin-server-base✕
Overview 3 matches · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
3matches 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 3 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 2 66.7% High 1 33.3% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 3 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 3 100.0%
split by peak 1 / quarter
Protected by Waratek: 3 High: 1Critical: 2 blocked by ARMR today: 3 No public exploit: 3
Q1 201 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1 Q2 200 Q3 201 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 Q4 200 Q1 210 Q2 210 Q3 210 Q4 210 Q1 220 Q2 220 Q3 220 Q4 221 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1
Q1 20Q2 20Q3 20Q4 20Q1 21Q2 21Q3 21Q4 21Q1 22Q2 22Q3 22Q4 22
3 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2022-44621 Critical 2022-12-30 Protected by Waratek No public exploit Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request.
CVE-2020-13926 Critical 2020-07-14 Protected by Waratek No public exploit Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is from system configurations, while the configuration can be overwritten by certain rest api, which makes SQL injection attack is possible. Users of all previous versions after 2.0 should upgrade to 3.1.0.
CVE-2020-1937 High 2020-02-24 Protected by Waratek No public exploit Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run malicious database queries.