WaratekVRT Sign in

Jackrabbit CVEs with a working exploit

2 CVEs, 1 protected by Waratek

Reset
More filters (1)
Columns
Product jackrabbit✕
Overview 2 matches · 1 protected · 0 exploited · 0 CISA KEV · 1 EPSS ≥ 0.5
2matches 1protected50.0% 0exploited0.0% 0CISA KEV0.0% 1EPSS ≥ 0.550.0%
Protected by Waratek 1 50.0% Rule in development 0 0.0% Mitigation candidate 1 50.0% No exploit published 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 2 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 50.0% partly blocked 0 0.0% not blocked 1 50.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 2 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 1 / year
Mitigation candidate: 1Protected by Waratek: 1 Medium: 2 not blocked: 1blocked by ARMR today: 1 Working exploit published: 2
20091 Mitigation candidate1 Medium1 not blocked1 Working exploit published1 20100 20110 20120 20130 20140 20151 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1
2009201020112012201320142015
2 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2015-1833 Medium 2015-05-29 Protected by Waratek Working exploit published XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet servers via a crafted WebDAV request.
CVE-2009-0026 Medium 2009-01-21 Mitigation candidate Working exploit published Multiple cross-site scripting (XSS) vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to (1) search.jsp or (2) swr.jsp.