java CVEs | Waratek

VRT Sign in

Look up CVE IDs Status Exploitation Severity

Reset

Overview 202 matches · 28 protected · 0 exploited · 0 CISA KEV · 4 public PoC · 1 EPSS ≥ 0.5

202matches 28protected13.9% 0exploited0.0% 0CISA KEV0.0% 4public PoC2.0% 1EPSS ≥ 0.50.5%

Protected by Waratek 28 13.9% Rule in development 0 0.0% Mitigation candidate 2 1.0% No exploit published 172 85.1%

Critical 32 15.8% High 106 52.5% Medium 56 27.7% Low 8 4.0% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 28 13.9% partly blocked 0 0.0% not blocked 174 86.1% not established 0 0.0% unrecorded 0 0.0%

Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 34 16.8% Forecast only 0 0.0% No public exploit 168 83.2%

split by StatusSeverityProtectionExploit maturity peak 96 / year

20197 Protected by Waratek3 No exploit published4 High3 Medium4 blocked by ARMR today3 not blocked4 No public exploit7 202010 No exploit published10 Critical3 High5 Medium2 not blocked10 No public exploit10 202117 Protected by Waratek4 Mitigation candidate2 No exploit published11 Critical4 High5 Medium7 Low1 blocked by ARMR today4 not blocked13 Proof of concept only2 No public exploit15 202224 Protected by Waratek4 No exploit published20 Critical1 High16 Medium6 Low1 blocked by ARMR today4 not blocked20 Proof of concept only7 No public exploit17 202320 Protected by Waratek2 No exploit published18 Critical5 High11 Medium4 blocked by ARMR today2 not blocked18 Proof of concept only7 No public exploit13 202419 Protected by Waratek6 No exploit published13 Critical1 High11 Medium5 Low2 blocked by ARMR today6 not blocked13 Proof of concept only6 No public exploit13 20259 Protected by Waratek3 No exploit published6 Critical2 High5 Medium2 blocked by ARMR today3 not blocked6 Proof of concept only2 No public exploit7 202696 Protected by Waratek6 No exploit published90 Critical16 High50 Medium26 Low4 blocked by ARMR today6 not blocked90 Proof of concept only10 No public exploit86

20192020202120222023202420252026

202 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2019-4473	High	2019-08-05	No exploit published	No public exploit	Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.
CVE-2019-3802	Medium	2019-06-03	No exploit published	No public exploit	This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted example value is supplied.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2019-4473

High

2019-08-05

No exploit published

No public exploit

Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.

CVE-2019-3802

Medium

2019-06-03

No exploit published

No public exploit

This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted example value is supplied.