WaratekVRT Sign in

Exploited Medium Fusion CVEs

3 CVEs, 2 protected by Waratek

Reset
More filters (1)
Columns
Product fusion✕
Overview 3 matches · 2 protected · 1 CISA KEV · 2 public PoC · 1 EPSS ≥ 0.5
3matches 2protected66.7% 1CISA KEV33.3% 2public PoC66.7% 1EPSS ≥ 0.533.3%
Protected by Waratek 2 66.7% Rule in development 0 0.0% Mitigation candidate 1 33.3% No exploit published 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 3 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 66.7% partly blocked 0 0.0% not blocked 0 0.0% not established 1 33.3% unrecorded 0 0.0%
Exploited 3 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 2 / month
Mitigation candidate: 1Protected by Waratek: 2 Medium: 3 not established: 1blocked by ARMR today: 2 Exploited: 3
Oct 122 Protected by Waratek1 Mitigation candidate1 Medium2 blocked by ARMR today1 not established1 Exploited2 Nov 120 Dec 120 Jan 130 Feb 130 Mar 130 Apr 130 May 130 Jun 130 Jul 130 Aug 130 Sep 130 Oct 131 Protected by Waratek1 Medium1 blocked by ARMR today1 Exploited1
Oct 12Dec 12Feb 13Apr 13Jun 13Aug 13Oct 13
3 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2013-3827 Medium 2013-10-16 Protected by Waratek Exploited Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.
CVE-2012-3153 Medium 2012-10-16 Protected by Waratek Exploited Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet. NOTE: the previous information is from the October 2012 CPU. Oracle has not commented on claims from the original researcher that the PARSEQUERY function allows remote attackers to obtain database credentials via reports/rwservlet/parsequery, and that this issue occurs in earlier versions. NOTE: this can be leveraged with CVE-2012-3152 to execute arbitrary code by uploading a .jsp file.
CVE-2012-0518 Medium 2012-10-16 Mitigation candidate Exploited Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.