WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕EPSS ≥ 0.5✕Product sentry✕
Overview 5 matches · 0 in Waratek scope · 0 protected · 3 exploited · 3 CISA KEV · 4 public PoC
5matches 0in Waratek scope0.0% 0protected0.0% 3exploited60.0% 3CISA KEV60.0% 4public PoC80.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 5 100.0% Withdrawn CVE 0 0.0%
Critical 4 80.0% High 1 20.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 5 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 60.0% Working exploit published 1 20.0% Proof of concept only 0 0.0% Forecast only 1 20.0% No public exploit 0 0.0%
split by peak 2 / year
Not applicable: 5 High: 1Critical: 4 not blocked: 5 Forecast only: 1Working exploit published: 1Exploited: 3
20041 Not applicable1 High1 not blocked1 Working exploit published1 20050 20060 20070 20080 20090 20100 20110 20120 20130 20140 20150 20160 20170 20180 20190 20201 Not applicable1 Critical1 not blocked1 Exploited1 20210 20220 20231 Not applicable1 Critical1 not blocked1 Exploited1 20240 20250 20262 Not applicable2 Critical2 not blocked2 Exploited1 Forecast only1
200420062008201020122014201620182020202220242026
5 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-10523 Critical 2026-06-09 Not applicable Forecast only An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access
CVE-2026-10520 Critical 2026-06-09 Not applicable Exploited An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution
CVE-2023-38035 Critical 2023-08-21 Not applicable Exploited A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.
CVE-2020-15505 Critical 2020-07-07 Not applicable Exploited A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database (RDB) version 2.0.0.1 and earlier that allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2004-0362 High 2004-04-15 Not applicable Working exploit published Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm.