WaratekVRT Sign in
Reset
More filters (2)
Columns
Waratek file added from 2026-10-15✕Waratek file added to 2026-11-13✕
Overview 4 matches · 0 CISA KEV · 3 public PoC · 2 EPSS ≥ 0.5
4matches 0CISA KEV0.0% 3public PoC75.0% 2EPSS ≥ 0.550.0%
Protected by Waratek 4 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 3 75.0% High 1 25.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 4 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 4 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 1 / year
Protected by Waratek: 4 High: 1Critical: 3 blocked by ARMR today: 4 Exploited: 4
20181 Protected by Waratek1 High1 blocked by ARMR today1 Exploited1 20190 20200 20211 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1 20221 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1 20230 20240 20250 20261 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1
201820192020202120222023202420252026
4 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-101767 Critical 2026-10-20 Protected by Waratek Exploited Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2022-1471 Critical 2022-12-01 Protected by Waratek Exploited SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.
CVE-2021-37580 Critical 2021-11-16 Protected by Waratek Exploited A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0
CVE-2018-1000130 High 2018-03-14 Protected by Waratek Exploited A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server.