Release CVEs
242 CVEs, 2 exploited, 13 protected by Waratek
Overview 242 matches · 13 protected · 2 exploited · 0 CISA KEV · 4 public PoC · 0 EPSS ≥ 0.5
Protected by Waratek
13
5.4%
Rule in development
1
0.4%
Mitigation candidate
4
1.7%
No exploit published
224
92.6%
blocked by ARMR today
13
5.4%
partly blocked
0
0.0%
not blocked
229
94.6%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
2
0.8%
Working exploit published
3
1.2%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
237
97.9%
split by
peak 46 / year
20061
No exploit published1
High1
not blocked1
No public exploit1
20070
20080
20090
20100
20110
20120
20130
20140
20150
20160
201717
Protected by Waratek1
No exploit published16
Critical3
High3
Medium10
Low1
blocked by ARMR today1
not blocked16
No public exploit17
20187
No exploit published7
Critical1
High3
Medium3
not blocked7
No public exploit7
20197
Protected by Waratek2
Mitigation candidate1
No exploit published4
Critical1
High2
Medium4
blocked by ARMR today2
not blocked5
Working exploit published1
No public exploit6
202015
Protected by Waratek1
Mitigation candidate1
No exploit published13
High4
Medium11
blocked by ARMR today1
not blocked14
Working exploit published1
No public exploit14
202134
Protected by Waratek1
No exploit published33
High7
Medium27
blocked by ARMR today1
not blocked33
No public exploit34
202246
Protected by Waratek5
Mitigation candidate1
No exploit published40
Critical2
High5
Medium39
blocked by ARMR today5
not blocked41
Working exploit published1
No public exploit45
202326
Protected by Waratek1
No exploit published25
Critical8
High5
Medium13
blocked by ARMR today1
not blocked25
No public exploit26
202445
Protected by Waratek1
Mitigation candidate1
No exploit published43
Critical15
High7
Medium23
blocked by ARMR today1
not blocked44
Exploited1
No public exploit44
202543
Protected by Waratek1
Rule in development1
No exploit published41
High3
Medium39
Low1
blocked by ARMR today1
not blocked42
Exploited1
No public exploit42
20261
No exploit published1
Medium1
not blocked1
No public exploit1
20062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2020-2270 | Medium | 2020-09-16 | No exploit published | No public exploit | Jenkins ClearCase Release Plugin 0.3 and earlier does not escape the composite baseline in badge tooltip, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission. |
| CVE-2020-24554 | High | 2020-09-01 | No exploit published | No public exploit | The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is recorded, which allows remote attackers to perform a denial of service attack by making repeated requests for pages that do not exist. |
| CVE-2020-15842 | High | 2020-07-20 | Protected by Waratek | No public exploit | Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, allows man-in-the-middle attackers to execute arbitrary code via crafted serialized payloads, because of insecure deserialization. |
| CVE-2020-15841 | High | 2020-07-20 | No exploit published | No public exploit | Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attackers to obtain the LDAP server's password via the Test LDAP Connection feature. |
| CVE-2020-13445 | High | 2020-06-10 | No exploit published | No public exploit | In Liferay Portal before 7.3.2 and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 6, the template API does not restrict user access to sensitive objects, which allows remote authenticated users to execute arbitrary code via crafted FreeMarker and Velocity templates. |
| CVE-2020-13444 | Medium | 2020-06-10 | No exploit published | No public exploit | Liferay Portal 7.x before 7.3.2, and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 5 does not sanitize the information returned by the DDMDataProvider API, which allows remote authenticated users to obtain the password to REST Data Providers. |
| CVE-2020-2199 | Medium | 2020-06-03 | No exploit published | No public exploit | Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier does not escape the error message for the repository URL field form validation, resulting in a reflected cross-site scripting vulnerability. |
| CVE-2020-2152 | Medium | 2020-03-09 | No exploit published | No public exploit | Jenkins Subversion Release Manager Plugin 1.2 and earlier does not escape the error message for the Repository URL field form validation, resulting in a reflected cross-site scripting vulnerability. |
| CVE-2020-2127 | Medium | 2020-02-12 | No exploit published | No public exploit | Jenkins BMC Release Package and Deployment Plugin 1.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. |
| CVE-2020-7934 | Medium | 2020-01-28 | Mitigation candidate | Working exploit published | In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyAccountPortlet are all vulnerable to a persistent XSS issue. Any user can modify these fields with a particular XSS payload, and it will be stored in the database. The payload will then be rendered when a user utilizes the search feature to search for other users (i.e., if a user with modified fields occurs in the search results). This issue was fixed in Liferay Portal CE version 7.3.0 GA1. |
| CVE-2019-16550 | High | 2019-12-17 | No exploit published | No public exploit | A cross-site request forgery vulnerability in a connection test form method in Jenkins Maven Release Plugin 0.16.1 and earlier allows attackers to have Jenkins connect to an attacker specified web server and parse XML documents. |
| CVE-2019-16549 | High | 2019-12-17 | Protected by Waratek | No public exploit | Jenkins Maven Release Plugin 0.16.1 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks, allowing man-in-the-middle attackers to have Jenkins parse crafted XML documents. |
| CVE-2019-16891 | Critical | 2019-10-04 | Protected by Waratek | No public exploit | Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload. |
| CVE-2019-10361 | Medium | 2019-07-31 | No exploit published | No public exploit | Jenkins Maven Release Plugin 0.14.0 and earlier stored credentials unencrypted on the Jenkins master where they could be viewed by users with access to the master file system. |
| CVE-2019-10360 | Medium | 2019-07-31 | No exploit published | No public exploit | A stored cross site scripting vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier allowed attackers to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins. |
| CVE-2019-10359 | Medium | 2019-07-31 | No exploit published | No public exploit | A cross-site request forgery vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier in the M2ReleaseAction#doSubmit method allowed attackers to perform releases with attacker-specified options. |
| CVE-2019-6588 | Medium | 2019-06-03 | Mitigation candidate | Working exploit published | In Liferay Portal before 7.1 CE GA4, an XSS vulnerability exists in the SimpleCaptcha API when custom code passes unsanitized input into the "url" parameter of the JSP taglib call <liferay-ui:captcha url="<%= url %>" /> or <liferay-captcha:captcha url="<%= url %>" />. Liferay Portal out-of-the-box behavior with no customizations is not vulnerable. |
| CVE-2018-15761 | Critical | 2018-11-19 | No exploit published | No public exploit | Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation. A remote authenticated user may modify the url and content of a consent page to gain a token with arbitrary scopes that escalates their privileges. |
| CVE-2018-11041 | Medium | 2018-06-25 | No exploit published | No public exploit | Cloud Foundry UAA, versions later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 and uaa-release versions later than v48 and prior to v60 except v55.1 and v52.9, does not validate redirect URL values on a form parameter used for internal UAA redirects on the login page, allowing open redirects. A remote attacker can craft a malicious link that, when clicked, will redirect users to arbitrary websites after a successful login attempt. |
| CVE-2018-1262 | High | 2018-05-15 | No exploit published | No public exploit | Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones for clients performing offline validation. A zone administrator could configure their zone to issue tokens which impersonate another zone, granting up to admin privileges in the impersonated zone for clients performing offline token validation. |
| CVE-2018-1192 | High | 2018-02-01 | No exploit published | No public exploit | In Cloud Foundry Foundation cf-release versions prior to v285; cf-deployment versions prior to v1.7; UAA 4.5.x versions prior to 4.5.5, 4.8.x versions prior to 4.8.3, and 4.7.x versions prior to 4.7.4; and UAA-release 45.7.x versions prior to 45.7, 52.7.x versions prior to 52.7, and 53.3.x versions prior to 53.3, the SessionID is logged in audit event logs. An attacker can use the SessionID to impersonate a logged-in user. |
| CVE-2018-1000013 | High | 2018-01-23 | No exploit published | No public exploit | Jenkins Release Plugin 2.9 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to trigger release builds. |
| CVE-2018-1190 | Medium | 2018-01-04 | No exploit published | No public exploit | An issue was discovered in these Pivotal Cloud Foundry products: all versions prior to cf-release v270, UAA v3.x prior to v3.20.2, and UAA bosh v30.x versions prior to v30.8 and all other versions prior to v45.0. A cross-site scripting (XSS) attack is possible in the clientId parameter of a request to the UAA OpenID Connect check session iframe endpoint used for single logout session management. |
| CVE-2017-1000425 | Medium | 2018-01-02 | No exploit published | No public exploit | Cross-site scripting (XSS) vulnerability in the /html/portal/flash.jsp page in Liferay Portal CE 7.0 GA4 and older allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the "movie" parameter. |
| CVE-2017-8031 | Medium | 2017-11-27 | No exploit published | No public exploit | An issue was discovered in Cloud Foundry Foundation cf-release (all versions prior to v279) and UAA (30.x versions prior to 30.6, 45.x versions prior to 45.4, 52.x versions prior to 52.1). In some cases, the UAA allows an authenticated user for a particular client to revoke client tokens for other users on the same client. This occurs only if the client is using opaque tokens or JWT tokens validated using the check_token endpoint. A malicious actor could cause denial of service. |
| CVE-2015-5172 | Critical | 2017-10-24 | No exploit published | No public exploit | Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire password reset links. |
| CVE-2015-5171 | Critical | 2017-10-24 | No exploit published | No public exploit | The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire existing sessions. |
| CVE-2015-5170 | High | 2017-10-24 | No exploit published | No public exploit | Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow remote attackers to conduct cross-site request forgery (CSRF) attacks on PWS and log a user into an arbitrary account by leveraging lack of CSRF checks. |
| CVE-2017-12649 | Medium | 2017-08-07 | No exploit published | No public exploit | XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display. |
| CVE-2017-12648 | Medium | 2017-08-07 | No exploit published | No public exploit | XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL. |
| CVE-2017-12647 | Medium | 2017-08-07 | No exploit published | No public exploit | XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title. |
| CVE-2017-12646 | Medium | 2017-08-07 | No exploit published | No public exploit | XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address. |
| CVE-2017-12645 | Medium | 2017-08-07 | No exploit published | No public exploit | XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId. |
| CVE-2016-10404 | Medium | 2017-08-07 | No exploit published | No public exploit | XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted redirect field to modules/apps/foundation/frontend-js/frontend-js-spa-web/src/main/resources/META-INF/resources/init.jsp. |
| CVE-2017-4992 | Critical | 2017-06-13 | No exploit published | No public exploit | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.15, 24.x versions prior to v24.10, 30.x versions prior to 30.3, and other versions prior to v37. There is privilege escalation (arbitrary password reset) with user invitations. |
| CVE-2017-4991 | High | 2017-06-13 | No exploit published | No public exploit | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v260; UAA release 2.x versions prior to v2.7.4.16, 3.6.x versions prior to v3.6.10, 3.9.x versions prior to v3.9.12, and other versions prior to v3.17.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.14, 24.x versions prior to v24.9, 30.x versions prior to 30.2, and other versions prior to v36. Privileged users in one zone are allowed to perform a password reset for users in a different zone. |
| CVE-2017-4974 | Medium | 2017-06-13 | Protected by Waratek | No public exploit | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions prior to v3.6.9, 3.9.x versions prior to v3.9.11, and other versions prior to v3.16.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.13, 24.x versions prior to v24.8, and other versions prior to v30.1. An authorized user can use a blind SQL injection attack to query the contents of the UAA database, aka "Blind SQL Injection with privileged UAA endpoints." |
| CVE-2015-3189 | Low | 2017-05-25 | No exploit published | No public exploit | With Cloud Foundry Runtime cf-release versions v208 or earlier, UAA Standalone versions 2.2.5 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier, old Password Reset Links are not expired after the user changes their current email address to a new one. This vulnerability is applicable only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDAP are not affected. |
| CVE-2017-1000361 | High | 2017-04-24 | No exploit published | No public exploit | DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptions and consumes more CPU resources. Component: OpenDaylight is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0. |
| CVE-2017-1000360 | Medium | 2017-04-24 | No exploit published | No public exploit | StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. Controller launches exceptions in the console. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0. |
| CVE-2016-5016 | Medium | 2017-04-24 | No exploit published | No public exploit | Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCF (aka Pivotal Cloud Foundry) Elastic Runtime 1.6.x before 1.6.35, and PCF Elastic Runtime 1.7.x before 1.7.13 does not validate if a certificate is expired. |
| CVE-2006-1884 | High | 2006-04-20 | No exploit published | No public exploit | Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka Vuln# OPA01. |