WaratekVRT Sign in
Reset
More filters (2)
Columns
Published to 2003-12-31✕Product application✕
Overview 2 matches · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 1 EPSS ≥ 0.5
2matches 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 1EPSS ≥ 0.550.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 2 100.0%
Critical 0 0.0% High 0 0.0% Medium 0 0.0% Low 2 100.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 2 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 1 50.0% No public exploit 1 50.0%
split by peak 1 / month
No exploit published: 2 Low: 2 not blocked: 2 No public exploit: 1Forecast only: 1
Jul 021 No exploit published1 Low1 not blocked1 Forecast only1 Aug 020 Sep 020 Oct 020 Nov 020 Dec 020 Jan 030 Feb 030 Mar 030 Apr 030 May 030 Jun 030 Jul 030 Aug 030 Sep 030 Oct 030 Nov 030 Dec 031 No exploit published1 Low1 not blocked1 No public exploit1
Aug 02Oct 02Dec 02Feb 03Apr 03Jun 03Aug 03Oct 03Dec 03
2 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2003-1447 Low 2003-12-31 No exploit published No public exploit IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt passwords when the configuration file is exported to XML.
CVE-2002-0568 Low 2002-07-03 No exploit published Forecast only Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConfig.xml or (2) soapConfig.xml through a virtual directory.