WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product oncommand workflow automation✕
Overview 5 matches · 3 in Waratek scope · 2 protected · 4 CISA KEV · 3 public PoC · 3 EPSS ≥ 0.5
5matches 3in Waratek scope60.0% 2protected40.0% 4CISA KEV80.0% 3public PoC60.0% 3EPSS ≥ 0.560.0%
Protected by Waratek 3 60.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 2 40.0% Not applicable 0 0.0% Withdrawn CVE 0 0.0%
Critical 1 20.0% High 3 60.0% Medium 1 20.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 40.0% partly blocked 1 20.0% not blocked 2 40.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 5 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 1 / year
Outside Waratek scope: 2Protected by Waratek: 3 Medium: 1High: 3Critical: 1 not blocked: 2partly blocked: 1blocked by ARMR today: 2 Exploited: 5
20161 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1 20171 Protected by Waratek1 High1 partly blocked1 Exploited1 20181 Protected by Waratek1 High1 blocked by ARMR today1 Exploited1 20190 20200 20210 20221 Outside Waratek scope1 Medium1 not blocked1 Exploited1 20231 Outside Waratek scope1 High1 not blocked1 Exploited1
20162017201820192020202120222023
5 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2023-41993 High 2023-09-21 Outside Waratek scope Exploited The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
CVE-2022-21589 Medium 2022-10-18 Outside Waratek scope Exploited Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.39 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
CVE-2018-11776 High 2018-08-22 Protected by Waratek Exploited Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace and similar to results, same possibility when using url tag which doesn't have value and action set and in same time, its upper package have no or wildcard namespace.
CVE-2017-12617 High 2017-10-04 Protected by Waratek Exploited When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
CVE-2016-3427 Critical 2016-04-21 Protected by Waratek Exploited Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.