WaratekVRT Sign in

Report CVEs

211 CVEs, 7 exploited, 28 protected by Waratek

Reset
More filters (1)
Columns
Product report✕
Overview 211 matches · 28 protected · 7 exploited · 5 CISA KEV · 14 public PoC · 11 EPSS ≥ 0.5
211matches 28protected13.3% 7exploited3.3% 5CISA KEV2.4% 14public PoC6.6% 11EPSS ≥ 0.55.2%
Protected by Waratek 28 13.3% Rule in development 0 0.0% Mitigation candidate 8 3.8% No exploit published 175 82.9%
Critical 49 23.2% High 89 42.2% Medium 68 32.2% Low 5 2.4% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 28 13.3% partly blocked 0 0.0% not blocked 183 86.7% not established 0 0.0% unrecorded 0 0.0%
Exploited 7 3.3% Working exploit published 3 1.4% Proof of concept only 11 5.2% Forecast only 3 1.4% No public exploit 187 88.6%
split by peak 77 / year
No exploit published: 175Mitigation candidate: 8Protected by Waratek: 28 Low: 5Medium: 68High: 89Critical: 49 not blocked: 183blocked by ARMR today: 28 No public exploit: 187Forecast only: 3Proof of concept only: 11Working exploit published: 3Exploited: 7
20081 No exploit published1 Medium1 not blocked1 No public exploit1 20090 20100 20110 20120 20130 20141 No exploit published1 High1 not blocked1 No public exploit1 20150 20165 Protected by Waratek2 No exploit published3 Critical3 Medium2 blocked by ARMR today2 not blocked3 Exploited2 No public exploit3 201712 Protected by Waratek1 No exploit published11 Critical4 High3 Medium5 blocked by ARMR today1 not blocked11 Working exploit published1 No public exploit11 20186 No exploit published6 High4 Medium2 not blocked6 No public exploit6 201917 Protected by Waratek3 Mitigation candidate1 No exploit published13 Critical1 High5 Medium11 blocked by ARMR today3 not blocked14 Working exploit published1 No public exploit16 202036 Protected by Waratek7 Mitigation candidate4 No exploit published25 Critical4 High22 Medium9 Low1 blocked by ARMR today7 not blocked29 Exploited1 Working exploit published1 Proof of concept only2 No public exploit32 202132 Protected by Waratek7 Mitigation candidate2 No exploit published23 Critical3 High18 Medium9 Low2 blocked by ARMR today7 not blocked25 Exploited3 Proof of concept only3 Forecast only3 No public exploit23 20225 Protected by Waratek1 No exploit published4 Critical1 High2 Medium2 blocked by ARMR today1 not blocked4 No public exploit5 202312 Protected by Waratek3 Mitigation candidate1 No exploit published8 Critical1 High7 Medium4 blocked by ARMR today3 not blocked9 Exploited1 Proof of concept only2 No public exploit9 20243 No exploit published3 Medium3 not blocked3 No public exploit3 20254 Protected by Waratek1 No exploit published3 High1 Medium3 blocked by ARMR today1 not blocked3 Proof of concept only1 No public exploit3 202677 Protected by Waratek3 No exploit published74 Critical32 High26 Medium17 Low2 blocked by ARMR today3 not blocked74 Proof of concept only3 No public exploit74
2008201020122014201620182020202220242026
211 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2017-10097 Medium 2017-08-08 No exploit published No public exploit Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized read access to a subset of Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
CVE-2017-10044 Medium 2017-08-08 No exploit published No public exploit Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized read access to a subset of Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).
CVE-2017-10000 High 2017-08-08 No exploit published No public exploit Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. While the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
CVE-2017-5645 Critical 2017-04-17 Protected by Waratek Working exploit published In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
CVE-2016-3493 Critical 2016-07-21 No exploit published No public exploit Unspecified vulnerability in the Hyperion Financial Reporting component in Oracle Hyperion 11.1.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Security Models.
CVE-2016-3427 Critical 2016-04-21 Protected by Waratek Exploited Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
CVE-2016-0580 Medium 2016-01-21 No exploit published No public exploit Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect availability via unknown vectors.
CVE-2016-0539 Medium 2016-01-21 No exploit published No public exploit Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2015-7450 Critical 2016-01-02 Protected by Waratek Exploited Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.
CVE-2013-3830 High 2014-01-15 No exploit published No public exploit Unspecified vulnerability in the Hyperion Strategic Finance component in Oracle Hyperion 11.1.2.1 and 11.1.2.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Server.
CVE-2008-2585 Medium 2008-07-15 No exploit published No public exploit Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors.
‹ prev page 3 of 3 next ›