Medium Fusion CVEs
205 CVEs, 3 exploited, 8 protected by Waratek
Overview 205 matches · 8 protected · 3 exploited · 1 CISA KEV · 15 public PoC · 4 EPSS ≥ 0.5
Protected by Waratek
8
3.9%
Rule in development
0
0.0%
Mitigation candidate
13
6.3%
No exploit published
184
89.8%
blocked by ARMR today
8
3.9%
partly blocked
0
0.0%
not blocked
196
95.6%
not established
1
0.5%
unrecorded
0
0.0%
split by
peak 48 / year
201013
Protected by Waratek1
Mitigation candidate1
No exploit published11
Medium13
blocked by ARMR today1
not blocked12
Working exploit published2
No public exploit11
201117
Mitigation candidate1
No exploit published16
Medium17
not blocked17
Working exploit published1
No public exploit16
201227
Protected by Waratek1
Mitigation candidate5
No exploit published21
Medium27
blocked by ARMR today1
not blocked25
not established1
Exploited2
Working exploit published4
No public exploit21
201332
Protected by Waratek1
Mitigation candidate3
No exploit published28
Medium32
blocked by ARMR today1
not blocked31
Exploited1
Working exploit published3
No public exploit28
201448
Mitigation candidate3
No exploit published45
Medium48
not blocked48
Working exploit published3
No public exploit45
201540
No exploit published40
Medium40
not blocked40
No public exploit40
201611
No exploit published11
Medium11
not blocked11
No public exploit11
20170
20183
No exploit published3
Medium3
not blocked3
No public exploit3
20191
Protected by Waratek1
Medium1
blocked by ARMR today1
No public exploit1
20203
No exploit published3
Medium3
not blocked3
No public exploit3
20212
Protected by Waratek1
No exploit published1
Medium2
blocked by ARMR today1
not blocked1
No public exploit2
20220
20231
No exploit published1
Medium1
not blocked1
No public exploit1
20242
No exploit published2
Medium2
not blocked2
No public exploit2
20253
Protected by Waratek3
Medium3
blocked by ARMR today3
Proof of concept only3
20262
No exploit published2
Medium2
not blocked2
No public exploit2
201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2010-1622 | Medium | 2010-06-21 | Protected by Waratek | Working exploit published | SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file. |
| CVE-2010-0872 | Medium | 2010-04-13 | No exploit published | No public exploit | Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3 allows remote attackers to affect availability via unknown vectors. |
| CVE-2010-0856 | Medium | 2010-04-13 | No exploit published | No public exploit | Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.2 allows remote attackers to affect availability via unknown vectors. |
| CVE-2010-0855 | Medium | 2010-04-13 | No exploit published | No public exploit | Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0086. |
| CVE-2010-0086 | Medium | 2010-04-13 | No exploit published | No public exploit | Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0855. |