Overview 10 matches · 2 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
Protected by Waratek
2
20.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
8
80.0%
blocked by ARMR today
2
20.0%
partly blocked
0
0.0%
not blocked
8
80.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
10
100.0%
split by
peak 2 / quarter
Q4 991
No exploit published1
High1
not blocked1
No public exploit1
Q1 000
Q2 001
No exploit published1
High1
not blocked1
No public exploit1
Q3 000
Q4 000
Q1 010
Q2 011
No exploit published1
High1
not blocked1
No public exploit1
Q3 012
Protected by Waratek1
No exploit published1
High2
blocked by ARMR today1
not blocked1
No public exploit2
Q4 011
No exploit published1
High1
not blocked1
No public exploit1
Q1 021
No exploit published1
High1
not blocked1
No public exploit1
Q2 020
Q3 021
No exploit published1
High1
not blocked1
No public exploit1
Q4 022
Protected by Waratek1
No exploit published1
High2
blocked by ARMR today1
not blocked1
No public exploit2
Q4 99Q2 00Q4 00Q2 01Q4 01Q2 02Q4 02
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2002-1631 | High | 2002-12-31 | Protected by Waratek | No public exploit | SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter. |
| CVE-2002-1630 | High | 2002-12-31 | No exploit published | No public exploit | The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to send arbitrary emails. |
| CVE-2002-0569 | High | 2002-07-03 | No exploit published | No public exploit | Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet). |
| CVE-2001-1371 | High | 2002-02-06 | No exploit published | No public exploit | The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager. |
| CVE-2001-0824 | High | 2001-12-06 | No exploit published | No public exploit | Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page. |
| CVE-2001-0962 | High | 2001-09-19 | No exploit published | No public exploit | IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing. |
| CVE-2001-0591 | High | 2001-08-22 | Protected by Waratek | No public exploit | Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' (dot dot) attack. |
| CVE-2001-0326 | High | 2001-05-03 | No exploit published | No public exploit | Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the <<ALL FILES>> FilePermission. |
| CVE-2000-0497 | High | 2000-06-08 | No exploit published | No public exploit | IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. |
| CVE-1999-0852 | High | 1999-12-02 | No exploit published | No public exploit | IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin. |