WaratekVRT Sign in

Identity Manager CVEs

103 CVEs, 4 exploited, 10 protected by Waratek

Reset
More filters (1)
Columns
Product identity manager✕
Overview 103 matches · 10 protected · 4 exploited · 1 CISA KEV · 6 public PoC · 7 EPSS ≥ 0.5
103matches 10protected9.7% 4exploited3.9% 1CISA KEV1.0% 6public PoC5.8% 7EPSS ≥ 0.56.8%
Protected by Waratek 10 9.7% Rule in development 0 0.0% Mitigation candidate 1 1.0% No exploit published 92 89.3%
Critical 36 35.0% High 53 51.5% Medium 13 12.6% Low 1 1.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 10 9.7% partly blocked 0 0.0% not blocked 92 89.3% not established 1 1.0% unrecorded 0 0.0%
Exploited 4 3.9% Working exploit published 2 1.9% Proof of concept only 1 1.0% Forecast only 2 1.9% No public exploit 94 91.3%
split by peak 80 / year
No exploit published: 92Mitigation candidate: 1Protected by Waratek: 10 Low: 1Medium: 13High: 53Critical: 36 not established: 1not blocked: 92blocked by ARMR today: 10 No public exploit: 94Forecast only: 2Proof of concept only: 1Working exploit published: 2Exploited: 4
20141 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 20150 20162 No exploit published2 High1 Low1 not blocked2 No public exploit2 20174 Protected by Waratek1 No exploit published3 Critical3 High1 blocked by ARMR today1 not blocked3 Working exploit published1 No public exploit3 20182 Protected by Waratek1 No exploit published1 Critical1 High1 blocked by ARMR today1 not blocked1 No public exploit2 20193 Protected by Waratek1 No exploit published2 Critical1 High1 Medium1 blocked by ARMR today1 not blocked2 Exploited1 No public exploit2 20204 Protected by Waratek1 No exploit published3 High3 Medium1 blocked by ARMR today1 not blocked3 No public exploit4 20213 Protected by Waratek1 No exploit published2 High1 Medium2 blocked by ARMR today1 not blocked2 Exploited1 No public exploit2 20223 Protected by Waratek3 Critical1 High2 blocked by ARMR today3 Proof of concept only1 Forecast only2 20230 20240 20251 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1 202680 Mitigation candidate1 No exploit published79 Critical29 High43 Medium8 not blocked79 not established1 Exploited1 No public exploit79
2014201620182020202220242026
103 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2016-5506 Low 2016-10-25 No exploit published No public exploit Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware allows local users to affect confidentiality and integrity via vectors related to App Server.
CVE-2016-3092 High 2016-07-04 No exploit published No public exploit The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consumption) via a long boundary string.
CVE-2014-2880 Medium 2014-04-17 Protected by Waratek Working exploit published Open redirect vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backUrl parameter in a changepwd action to identity/faces/firstlogin.
‹ prev page 2 of 2 next ›