WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product java system web proxy server✕
Overview 12 matches · 1 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
12matches 1in Waratek scope8.3% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 8.3% Outside Waratek scope 0 0.0% Not applicable 11 91.7% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 4 33.3% Medium 8 66.7% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 12 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 12 100.0%
split by peak 4 / quarter
Not applicable: 11No exploit published: 1 Medium: 8High: 4 not blocked: 12 No public exploit: 12
Q4 041 Not applicable1 High1 not blocked1 No public exploit1 Q1 050 Q2 051 Not applicable1 High1 not blocked1 No public exploit1 Q3 050 Q4 051 Not applicable1 Medium1 not blocked1 No public exploit1 Q1 060 Q2 060 Q3 060 Q4 061 No exploit published1 Medium1 not blocked1 No public exploit1 Q1 070 Q2 071 Not applicable1 High1 not blocked1 No public exploit1 Q3 070 Q4 074 Not applicable4 Medium4 not blocked4 No public exploit4 Q1 080 Q2 080 Q3 081 Not applicable1 Medium1 not blocked1 No public exploit1 Q4 081 Not applicable1 High1 not blocked1 No public exploit1 Q1 090 Q2 090 Q3 090 Q4 090 Q1 100 Q2 100 Q3 101 Not applicable1 Medium1 not blocked1 No public exploit1
Q1 05Q3 05Q1 06Q3 06Q1 07Q3 07Q1 08Q3 08Q1 09Q3 09Q1 10Q3 10
12 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2010-2385 Medium 2010-07-13 Not applicable No public exploit Unspecified vulnerability in Oracle Sun Java System Web Proxy Server 4.0.13 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration Server.
CVE-2008-4541 High 2008-10-13 Not applicable No public exploit Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.
CVE-2008-3683 Medium 2008-08-14 Not applicable No public exploit Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to cause a denial of service (failure to accept connections) via unknown vectors, probably related to exhaustion of file descriptors.
CVE-2007-6572 Medium 2007-12-28 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566204.
CVE-2007-6571 Medium 2007-12-28 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6611356.
CVE-2007-6570 Medium 2007-12-28 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566309.
CVE-2007-6569 Medium 2007-12-28 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246.
CVE-2007-2881 High 2007-05-29 Not applicable No public exploit Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.
CVE-2006-6276 Medium 2006-12-04 No exploit published No public exploit HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting (XSS), and poison web caches via unspecified attack vectors.
CVE-2005-4806 Medium 2005-12-31 Not applicable No public exploit Multiple unspecified vulnerabilities in Sun Java System Web Proxy Server 3.6 SP7 and earlier allow remote attackers to cause a denial of service (unresponsive service) via unknown vectors.
CVE-2005-1232 High 2005-05-02 Not applicable No public exploit Buffer overflow in Sun Java System Web Proxy Server (aka Sun ONE Proxy Server) 3.6 SP6 allows remote attackers to execute arbitrary code via unknown vectors.
CVE-2004-1350 High 2004-10-30 Not applicable No public exploit Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests.