WaratekVRT Sign in

Snapmanager CVEs

106 CVEs, 2 exploited, 64 protected by Waratek

Reset
More filters (1)
Columns
Product snapmanager✕
Overview 106 matches · 64 protected · 2 exploited · 1 CISA KEV · 8 public PoC · 6 EPSS ≥ 0.5
split by peak 17 / quarter
No exploit published: 38Mitigation candidate: 4Protected by Waratek: 64 Low: 26Medium: 46High: 26Critical: 8 not blocked: 42blocked by ARMR today: 64 No public exploit: 94Forecast only: 2Proof of concept only: 3Working exploit published: 5Exploited: 2
Q3 1710 Protected by Waratek7 No exploit published3 Critical1 High5 Medium4 blocked by ARMR today7 not blocked3 No public exploit10 Q4 177 Protected by Waratek7 Critical1 High1 Medium4 Low1 blocked by ARMR today7 Working exploit published1 No public exploit6 Q1 180 Q2 183 No exploit published3 Critical2 High1 not blocked3 No public exploit3 Q3 184 Protected by Waratek3 No exploit published1 Critical1 High2 Low1 blocked by ARMR today3 not blocked1 No public exploit4 Q4 180 Q1 191 Protected by Waratek1 Low1 blocked by ARMR today1 No public exploit1 Q2 192 No exploit published2 Medium2 not blocked2 No public exploit2 Q3 190 Q4 1911 Protected by Waratek8 No exploit published3 Medium4 Low7 blocked by ARMR today8 not blocked3 No public exploit11 Q1 200 Q2 2011 Protected by Waratek10 No exploit published1 Critical1 High1 Medium4 Low5 blocked by ARMR today10 not blocked1 No public exploit11 Q3 206 Protected by Waratek5 No exploit published1 Medium2 Low4 blocked by ARMR today5 not blocked1 No public exploit6 Q4 206 Protected by Waratek4 No exploit published2 High1 Medium2 Low3 blocked by ARMR today4 not blocked2 Working exploit published1 No public exploit5 Q1 212 Protected by Waratek1 No exploit published1 Critical1 Medium1 blocked by ARMR today1 not blocked1 Forecast only1 No public exploit1 Q2 213 Mitigation candidate1 No exploit published2 High1 Medium1 Low1 not blocked3 Working exploit published1 No public exploit2 Q3 2114 Protected by Waratek1 Mitigation candidate3 No exploit published10 High13 Medium1 blocked by ARMR today1 not blocked13 Exploited2 Working exploit published2 No public exploit10 Q4 218 Protected by Waratek7 No exploit published1 Medium6 Low2 blocked by ARMR today7 not blocked1 Proof of concept only1 No public exploit7 Q1 2217 Protected by Waratek10 No exploit published7 Critical1 High1 Medium14 Low1 blocked by ARMR today10 not blocked7 Proof of concept only2 Forecast only1 No public exploit14 Q2 221 No exploit published1 Medium1 not blocked1 No public exploit1
Q4 17Q2 18Q4 18Q2 19Q4 19Q2 20Q4 20Q2 21Q4 21Q2 22
106 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2017-10118 High 2017-08-08 Protected by Waratek No public exploit Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
CVE-2017-10116 High 2017-08-08 Protected by Waratek No public exploit Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
CVE-2017-10115 High 2017-08-08 Protected by Waratek No public exploit Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
CVE-2017-10108 Medium 2017-08-08 Protected by Waratek No public exploit Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
CVE-2017-10102 Critical 2017-08-08 No exploit published No public exploit Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).
CVE-2017-10078 High 2017-08-08 Protected by Waratek No public exploit Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affected is Java SE: 8u131. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data as well as unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
‹ prev page 2 of 2 next ›