Apache CVEs with a working exploit
104 CVEs, 29 protected by Waratek
Overview 104 matches · 29 protected · 0 exploited · 0 CISA KEV · 56 EPSS ≥ 0.5
Protected by Waratek
29
27.9%
Rule in development
1
1.0%
Mitigation candidate
74
71.2%
No exploit published
0
0.0%
blocked by ARMR today
29
27.9%
partly blocked
0
0.0%
not blocked
75
72.1%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
104
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 8 / year
20002
Mitigation candidate2
Medium2
not blocked2
Working exploit published2
20011
Mitigation candidate1
Medium1
not blocked1
Working exploit published1
20026
Mitigation candidate6
High2
Medium4
not blocked6
Working exploit published6
20033
Protected by Waratek1
Mitigation candidate2
Medium3
blocked by ARMR today1
not blocked2
Working exploit published3
20040
20052
Protected by Waratek1
Mitigation candidate1
Medium2
blocked by ARMR today1
not blocked1
Working exploit published2
20062
Mitigation candidate2
Medium2
not blocked2
Working exploit published2
20077
Protected by Waratek1
Mitigation candidate6
Medium6
Low1
blocked by ARMR today1
not blocked6
Working exploit published7
20084
Protected by Waratek2
Mitigation candidate2
Medium4
blocked by ARMR today2
not blocked2
Working exploit published4
20098
Protected by Waratek2
Mitigation candidate6
High2
Medium6
blocked by ARMR today2
not blocked6
Working exploit published8
20106
Protected by Waratek1
Mitigation candidate5
Medium5
Low1
blocked by ARMR today1
not blocked5
Working exploit published6
20112
Mitigation candidate2
High1
Low1
not blocked2
Working exploit published2
20127
Mitigation candidate7
Medium7
not blocked7
Working exploit published7
20136
Mitigation candidate6
High2
Medium4
not blocked6
Working exploit published6
20142
Protected by Waratek1
Mitigation candidate1
High1
Medium1
blocked by ARMR today1
not blocked1
Working exploit published2
20152
Protected by Waratek2
Medium2
blocked by ARMR today2
Working exploit published2
20168
Protected by Waratek4
Mitigation candidate4
Critical1
High6
Medium1
blocked by ARMR today4
not blocked4
Working exploit published8
20173
Protected by Waratek3
Critical2
High1
blocked by ARMR today3
Working exploit published3
20183
Mitigation candidate3
High2
Medium1
not blocked3
Working exploit published3
20194
Protected by Waratek1
Mitigation candidate3
Critical1
High1
Medium2
blocked by ARMR today1
not blocked3
Working exploit published4
20206
Protected by Waratek3
Mitigation candidate3
High5
Medium1
blocked by ARMR today3
not blocked3
Working exploit published6
20213
Protected by Waratek2
Rule in development1
Critical3
blocked by ARMR today2
not blocked1
Working exploit published3
20223
Protected by Waratek1
Mitigation candidate2
Critical2
High1
blocked by ARMR today1
not blocked2
Working exploit published3
20233
Protected by Waratek1
Mitigation candidate2
High2
Medium1
blocked by ARMR today1
not blocked2
Working exploit published3
20245
Mitigation candidate5
Critical2
High1
Medium1
Low1
not blocked5
Working exploit published5
20255
Protected by Waratek2
Mitigation candidate3
Critical2
High1
Medium2
blocked by ARMR today2
not blocked3
Working exploit published5
20261
Protected by Waratek1
Medium1
blocked by ARMR today1
Working exploit published1
200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2002-0682 | High | 2002-07-23 | Mitigation candidate | Working exploit published | Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping, which does not filter the script when an exception is thrown by the servlet. |
| CVE-2001-0590 | Medium | 2001-08-02 | Mitigation candidate | Working exploit published | Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0). |
| CVE-2000-0760 | Medium | 2000-10-20 | Mitigation candidate | Working exploit published | The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension. |
| CVE-2000-0759 | Medium | 2000-10-20 | Mitigation candidate | Working exploit published | Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path. |