WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Oracle product: Oracle Hyperion✕
Overview 5 matches · 3 in Waratek scope · 2 protected · 0 exploited · 0 CISA KEV · 0 EPSS ≥ 0.5
5matches 3in Waratek scope60.0% 2protected40.0% 0exploited0.0% 0CISA KEV0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 2 40.0% Rule in development 0 0.0% Mitigation candidate 1 20.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 2 40.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 1 20.0% Medium 3 60.0% Low 1 20.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 40.0% partly blocked 0 0.0% not blocked 3 60.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 5 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 1 / year
Not applicable: 2Mitigation candidate: 1Protected by Waratek: 2 Low: 1Medium: 3High: 1 not blocked: 3blocked by ARMR today: 2 Working exploit published: 5
20131 Mitigation candidate1 Low1 not blocked1 Working exploit published1 20140 20151 Not applicable1 Medium1 not blocked1 Working exploit published1 20160 20170 20180 20191 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 20200 20211 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 20220 20230 20241 Not applicable1 High1 not blocked1 Working exploit published1
201320142015201620172018201920202021202220232024
5 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2023-6246 High 2024-01-31 Not applicable Working exploit published A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when the openlog function was not called, or called with the ident argument set to NULL, and the program name (the basename of argv[0]) is bigger than 1024 bytes, resulting in an application crash or local privilege escalation. This issue affects glibc 2.36 and newer.
CVE-2020-6950 Medium 2021-06-02 Protected by Waratek Working exploit published Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.
CVE-2019-2861 Medium 2019-07-23 Protected by Waratek Working exploit published Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Security). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Planning. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Planning accessible data. CVSS 3.0 Base Score 4.2 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N).
CVE-2015-2572 Medium 2015-04-16 Not applicable Working exploit published Unspecified vulnerability in the Oracle Hyperion Smart View for Office component in Oracle Hyperion 11.1.2.5.216 and earlier, when running on Windows, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.
CVE-2013-3803 Low 2013-07-17 Mitigation candidate Working exploit published Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.1.3, 11.1.1.4.107 and earlier, 11.1.2.1.129 and earlier, and 11.1.2.2.305 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Intelligence Service.