WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Product web application firewall✕Has a public PoC✕
Overview 17 matches · 2 in Waratek scope · 1 protected · 7 exploited · 5 CISA KEV · 7 EPSS ≥ 0.5
17matches 2in Waratek scope11.8% 1protected5.9% 7exploited41.2% 5CISA KEV29.4% 7EPSS ≥ 0.541.2%
Protected by Waratek 1 5.9% Rule in development 0 0.0% Mitigation candidate 1 5.9% No exploit published 0 0.0% Outside Waratek scope 1 5.9% Not applicable 14 82.4% Withdrawn CVE 0 0.0%
Critical 7 41.2% High 4 23.5% Medium 6 35.3% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 5.9% partly blocked 0 0.0% not blocked 16 94.1% not established 0 0.0% unrecorded 0 0.0%
Exploited 7 41.2% Working exploit published 6 35.3% Proof of concept only 4 23.5% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 4 / year
Not applicable: 14Outside Waratek scope: 1Mitigation candidate: 1Protected by Waratek: 1 Medium: 6High: 4Critical: 7 not blocked: 16blocked by ARMR today: 1 Proof of concept only: 4Working exploit published: 6Exploited: 7
20094 Not applicable4 Medium4 not blocked4 Working exploit published4 20100 20110 20120 20130 20140 20150 20160 20171 Not applicable1 Critical1 not blocked1 Working exploit published1 20181 Outside Waratek scope1 Medium1 not blocked1 Exploited1 20190 20202 Not applicable2 Critical2 not blocked2 Exploited1 Working exploit published1 20213 Protected by Waratek1 Not applicable2 Critical1 High1 Medium1 blocked by ARMR today1 not blocked2 Exploited2 Proof of concept only1 20221 Not applicable1 Critical1 not blocked1 Proof of concept only1 20232 Mitigation candidate1 Not applicable1 Critical1 High1 not blocked2 Exploited2 20240 20252 Not applicable2 High2 not blocked2 Proof of concept only2 20261 Not applicable1 Critical1 not blocked1 Exploited1
201020122014201620182020202220242026
17 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-8037 Critical 2026-06-04 Not applicable Exploited OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints
CVE-2025-31644 High 2025-05-07 Not applicable Proof of concept only When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-20029 High 2025-02-05 Not applicable Proof of concept only Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2023-46747 Critical 2023-10-26 Not applicable Exploited Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
CVE-2023-44487 High 2023-10-10 Mitigation candidate Exploited The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-45468 Critical 2022-01-14 Not applicable Proof of concept only Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encoding: gzip" to evade WAF security controls and send malicious HTTP POST requests to web servers behind the WAF.
CVE-2021-45105 Medium 2021-12-18 Protected by Waratek Exploited Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.
CVE-2002-20001 High 2021-11-11 Not applicable Proof of concept only The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.
CVE-2021-22986 Critical 2021-03-31 Not applicable Exploited On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x before 7.1.0.3 and 7.0.0.x before 7.0.0.2, the iControl REST interface has an unauthenticated remote command execution vulnerability. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
CVE-2020-5902 Critical 2020-07-01 Not applicable Exploited In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.
CVE-2014-2595 Critical 2020-02-12 Not applicable Working exploit published Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string.
CVE-2018-3639 Medium 2018-05-22 Outside Waratek scope Exploited Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
CVE-2017-14706 Critical 2017-09-22 Not applicable Working exploit published DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php, and then reading the iToken field in the reply. This affects DenyAll i-Suite LTS 5.5.0 through 5.5.12, i-Suite 5.6, Web Application Firewall 5.7, and Web Application Firewall 6.x before 6.4.1, with On Premises or AWS/Azure cloud deployments.
CVE-2009-3457 Medium 2009-09-29 Not applicable Working exploit published Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by (1) an OPTIONS request or (2) a crafted GET request, leading to a Message-handling Errors message containing a certain client intranet IP address, aka Bug ID CSCtb82159.
CVE-2009-1593 Medium 2009-05-21 Not applicable Working exploit published Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "negative model," which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element.
CVE-2009-0468 Medium 2009-02-10 Not applicable Working exploit published Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send ping packets, (3) enable network services, (4) configure a proxy server, and (5) modify other settings via parameters in the query string.
CVE-2009-0467 Medium 2009-02-10 Not applicable Working exploit published Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action.