WaratekVRT Sign in

Project CVEs

115 CVEs, 2 exploited, 21 protected by Waratek

Reset
More filters (1)
Columns
Product project✕
Overview 115 matches · 21 protected · 2 exploited · 0 CISA KEV · 2 public PoC · 4 EPSS ≥ 0.5
115matches 21protected18.3% 2exploited1.7% 0CISA KEV0.0% 2public PoC1.7% 4EPSS ≥ 0.53.5%
Protected by Waratek 21 18.3% Rule in development 0 0.0% Mitigation candidate 1 0.9% No exploit published 93 80.9%
Critical 17 14.8% High 31 27.0% Medium 63 54.8% Low 4 3.5% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 21 18.3% partly blocked 0 0.0% not blocked 94 81.7% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 1.7% Working exploit published 1 0.9% Proof of concept only 2 1.7% Forecast only 2 1.7% No public exploit 108 93.9%
split by peak 22 / year
No exploit published: 93Mitigation candidate: 1Protected by Waratek: 21 Low: 4Medium: 63High: 31Critical: 17 not blocked: 94blocked by ARMR today: 21 No public exploit: 108Forecast only: 2Proof of concept only: 2Working exploit published: 1Exploited: 2
20091 No exploit published1 Medium1 not blocked1 No public exploit1 20100 20110 20120 20130 20140 20150 201610 No exploit published10 Medium10 not blocked10 No public exploit10 201712 Protected by Waratek2 Mitigation candidate1 No exploit published9 Critical3 High4 Medium5 blocked by ARMR today2 not blocked10 Working exploit published1 No public exploit11 201814 Protected by Waratek2 No exploit published12 Critical1 High3 Medium10 blocked by ARMR today2 not blocked12 No public exploit14 201918 Protected by Waratek9 No exploit published9 Critical8 High1 Medium9 blocked by ARMR today9 not blocked9 No public exploit18 202014 Protected by Waratek2 No exploit published12 Critical2 High2 Medium10 blocked by ARMR today2 not blocked12 No public exploit14 20217 Protected by Waratek2 No exploit published5 High3 Medium4 blocked by ARMR today2 not blocked5 Exploited2 No public exploit5 20225 Protected by Waratek1 No exploit published4 Critical1 High2 Medium2 blocked by ARMR today1 not blocked4 Forecast only2 No public exploit3 20234 Protected by Waratek1 No exploit published3 Critical1 High2 Medium1 blocked by ARMR today1 not blocked3 Proof of concept only2 No public exploit2 20243 Protected by Waratek1 No exploit published2 High2 Medium1 blocked by ARMR today1 not blocked2 No public exploit3 20255 No exploit published5 Medium5 not blocked5 No public exploit5 202622 Protected by Waratek1 No exploit published21 Critical1 High12 Medium5 Low4 blocked by ARMR today1 not blocked21 No public exploit22
201020122014201620182020202220242026
115 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2017-3579 Medium 2017-04-24 No exploit published No public exploit Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
CVE-2017-3503 Critical 2017-04-24 No exploit published No public exploit Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access (Apache Commons BeanUtils)). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. While the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Primavera P6 Enterprise Project Portfolio Management. CVSS 3.0 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
CVE-2017-3324 Critical 2017-01-27 No exploit published No public exploit Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.2, 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. While the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Primavera P6 Enterprise Project Portfolio Management. CVSS v3.0 Base Score 10.0 (Confidentiality, Integrity and Availability impacts).
CVE-2017-3263 High 2017-01-27 No exploit published No public exploit Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Team Member). Supported versions that are affected are 8.2, 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS v3.0 Base Score 8.1 (Confidentiality and Integrity impacts).
CVE-2016-5533 Medium 2016-10-25 No exploit published No public exploit Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.4, 15.x, and 16.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2016-3573 Medium 2016-07-21 No exploit published No public exploit Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3569, CVE-2016-3570, and CVE-2016-3571.
CVE-2016-3572 Medium 2016-07-21 No exploit published No public exploit Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Access.
CVE-2016-3571 Medium 2016-07-21 No exploit published No public exploit Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3569, CVE-2016-3570, and CVE-2016-3573.
CVE-2016-3570 Medium 2016-07-21 No exploit published No public exploit Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3569, CVE-2016-3571, and CVE-2016-3573.
CVE-2016-3569 Medium 2016-07-21 No exploit published No public exploit Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3570, CVE-2016-3571, and CVE-2016-3573.
CVE-2016-3568 Medium 2016-07-21 No exploit published No public exploit Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3569, CVE-2016-3570, CVE-2016-3571, and CVE-2016-3573.
CVE-2016-3567 Medium 2016-07-21 No exploit published No public exploit Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web access.
CVE-2016-3566 Medium 2016-07-21 No exploit published No public exploit Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3568, CVE-2016-3569, CVE-2016-3570, CVE-2016-3571, and CVE-2016-3573.
CVE-2016-0534 Medium 2016-01-21 No exploit published No public exploit Unspecified vulnerability in the Oracle Project Contracts component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Printing.
CVE-2009-2625 Medium 2009-08-06 No exploit published No public exploit XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
‹ prev page 2 of 2 next ›