WaratekVRT Sign in

Apache CVEs with a working exploit

104 CVEs, 29 protected by Waratek

Reset
More filters (1)
Columns
Vendor apache✕
Overview 104 matches · 29 protected · 0 exploited · 0 CISA KEV · 56 EPSS ≥ 0.5
104matches 29protected27.9% 0exploited0.0% 0CISA KEV0.0% 56EPSS ≥ 0.553.8%
blocked by ARMR today 29 27.9% partly blocked 0 0.0% not blocked 75 72.1% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 104 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 8 / year
Mitigation candidate: 74Rule in development: 1Protected by Waratek: 29 Low: 4Medium: 59High: 28Critical: 13 not blocked: 75blocked by ARMR today: 29 Working exploit published: 104
20002 Mitigation candidate2 Medium2 not blocked2 Working exploit published2 20011 Mitigation candidate1 Medium1 not blocked1 Working exploit published1 20026 Mitigation candidate6 High2 Medium4 not blocked6 Working exploit published6 20033 Protected by Waratek1 Mitigation candidate2 Medium3 blocked by ARMR today1 not blocked2 Working exploit published3 20040 20052 Protected by Waratek1 Mitigation candidate1 Medium2 blocked by ARMR today1 not blocked1 Working exploit published2 20062 Mitigation candidate2 Medium2 not blocked2 Working exploit published2 20077 Protected by Waratek1 Mitigation candidate6 Medium6 Low1 blocked by ARMR today1 not blocked6 Working exploit published7 20084 Protected by Waratek2 Mitigation candidate2 Medium4 blocked by ARMR today2 not blocked2 Working exploit published4 20098 Protected by Waratek2 Mitigation candidate6 High2 Medium6 blocked by ARMR today2 not blocked6 Working exploit published8 20106 Protected by Waratek1 Mitigation candidate5 Medium5 Low1 blocked by ARMR today1 not blocked5 Working exploit published6 20112 Mitigation candidate2 High1 Low1 not blocked2 Working exploit published2 20127 Mitigation candidate7 Medium7 not blocked7 Working exploit published7 20136 Mitigation candidate6 High2 Medium4 not blocked6 Working exploit published6 20142 Protected by Waratek1 Mitigation candidate1 High1 Medium1 blocked by ARMR today1 not blocked1 Working exploit published2 20152 Protected by Waratek2 Medium2 blocked by ARMR today2 Working exploit published2 20168 Protected by Waratek4 Mitigation candidate4 Critical1 High6 Medium1 blocked by ARMR today4 not blocked4 Working exploit published8 20173 Protected by Waratek3 Critical2 High1 blocked by ARMR today3 Working exploit published3 20183 Mitigation candidate3 High2 Medium1 not blocked3 Working exploit published3 20194 Protected by Waratek1 Mitigation candidate3 Critical1 High1 Medium2 blocked by ARMR today1 not blocked3 Working exploit published4 20206 Protected by Waratek3 Mitigation candidate3 High5 Medium1 blocked by ARMR today3 not blocked3 Working exploit published6 20213 Protected by Waratek2 Rule in development1 Critical3 blocked by ARMR today2 not blocked1 Working exploit published3 20223 Protected by Waratek1 Mitigation candidate2 Critical2 High1 blocked by ARMR today1 not blocked2 Working exploit published3 20233 Protected by Waratek1 Mitigation candidate2 High2 Medium1 blocked by ARMR today1 not blocked2 Working exploit published3 20245 Mitigation candidate5 Critical2 High1 Medium1 Low1 not blocked5 Working exploit published5 20255 Protected by Waratek2 Mitigation candidate3 Critical2 High1 Medium2 blocked by ARMR today2 not blocked3 Working exploit published5 20261 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1
200220052008201120142017202020232026
104 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2002-0682 High 2002-07-23 Mitigation candidate Working exploit published Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping, which does not filter the script when an exception is thrown by the servlet.
CVE-2001-0590 Medium 2001-08-02 Mitigation candidate Working exploit published Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0).
CVE-2000-0760 Medium 2000-10-20 Mitigation candidate Working exploit published The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.
CVE-2000-0759 Medium 2000-10-20 Mitigation candidate Working exploit published Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.
‹ prev page 2 of 2 next ›