WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product: GraalVM✕
Overview 204 matches · 113 in Waratek scope · 48 protected · 1 exploited · 1 CISA KEV · 7 public PoC · 13 EPSS ≥ 0.5
204matches 113in Waratek scope55.4% 48protected23.5% 1exploited0.5% 1CISA KEV0.5% 7public PoC3.4% 13EPSS ≥ 0.56.4%
Protected by Waratek 48 23.5% Rule in development 0 0.0% Mitigation candidate 2 1.0% No exploit published 63 30.9% Outside Waratek scope 64 31.4% Not applicable 27 13.2% Withdrawn CVE 0 0.0%
Critical 6 2.9% High 59 28.9% Medium 88 43.1% Low 51 25.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 48 23.5% partly blocked 0 0.0% not blocked 156 76.5% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 0.5% Working exploit published 0 0.0% Proof of concept only 9 4.4% Forecast only 9 4.4% No public exploit 185 90.7%
split by peak 40 / year
Not applicable: 27Outside Waratek scope: 64No exploit published: 63Mitigation candidate: 2Protected by Waratek: 48 Low: 51Medium: 88High: 59Critical: 6 not blocked: 156blocked by ARMR today: 48 No public exploit: 185Forecast only: 9Proof of concept only: 9Exploited: 1
201916 Protected by Waratek2 No exploit published3 Outside Waratek scope6 Not applicable5 High12 Medium4 blocked by ARMR today2 not blocked14 Forecast only5 No public exploit11 202019 Protected by Waratek2 No exploit published8 Outside Waratek scope5 Not applicable4 Critical4 High8 Medium6 Low1 blocked by ARMR today2 not blocked17 Proof of concept only2 Forecast only2 No public exploit15 202140 Protected by Waratek9 No exploit published2 Outside Waratek scope14 Not applicable15 Critical2 High16 Medium18 Low4 blocked by ARMR today9 not blocked31 Proof of concept only3 Forecast only2 No public exploit35 202239 Protected by Waratek16 Mitigation candidate1 No exploit published13 Outside Waratek scope6 Not applicable3 High6 Medium28 Low5 blocked by ARMR today16 not blocked23 Proof of concept only3 No public exploit36 202322 Protected by Waratek8 No exploit published4 Outside Waratek scope10 High2 Medium9 Low11 blocked by ARMR today8 not blocked14 Exploited1 Proof of concept only1 No public exploit20 202432 Protected by Waratek5 No exploit published18 Outside Waratek scope9 High4 Medium7 Low21 blocked by ARMR today5 not blocked27 No public exploit32 202515 Protected by Waratek4 No exploit published4 Outside Waratek scope7 High5 Medium6 Low4 blocked by ARMR today4 not blocked11 No public exploit15 202621 Protected by Waratek2 Mitigation candidate1 No exploit published11 Outside Waratek scope7 High6 Medium10 Low5 blocked by ARMR today2 not blocked19 No public exploit21
20192020202120222023202420252026
204 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2019-9513 High 2019-08-13 Outside Waratek scope Forecast only Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.
CVE-2019-9511 High 2019-08-13 Outside Waratek scope Forecast only Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
CVE-2019-2862 Medium 2019-07-23 No exploit published No public exploit Vulnerability in the Oracle GraalVM Enterprise Edition component of Oracle GraalVM (subcomponent: Java). The supported version that is affected is 19.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle GraalVM Enterprise Edition. CVSS 3.0 Base Score 6.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H).
CVE-2019-2813 High 2019-07-23 No exploit published No public exploit Vulnerability in the Oracle GraalVM Enterprise Edition component of Oracle GraalVM (subcomponent: GraalVM). The supported version that is affected is 19.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle GraalVM Enterprise Edition. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
‹ prev page 3 of 3 next ›