WaratekVRT Sign in
Reset
More filters (1)
Columns
Product business process manager✕
Overview 2 matches · 1 exploited · 1 CISA KEV · 1 public PoC · 1 EPSS ≥ 0.5
2matches 1exploited50.0% 1CISA KEV50.0% 1public PoC50.0% 1EPSS ≥ 0.550.0%
Protected by Waratek 2 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 1 50.0% High 0 0.0% Medium 1 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 50.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 1 50.0%
split by peak 1 / month
Protected by Waratek: 2 Medium: 1Critical: 1 blocked by ARMR today: 2 No public exploit: 1Exploited: 1
Jul 131 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1 Aug 130 Sep 130 Oct 130 Nov 130 Dec 130 Jan 140 Feb 140 Mar 140 Apr 140 May 140 Jun 140 Jul 140 Aug 141 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1
Aug 13Oct 13Dec 13Feb 14Apr 14Jun 14Aug 14
2 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2014-3087 Medium 2014-08-17 Protected by Waratek No public exploit callService.do in IBM Business Process Manager (BPM) 7.5 through 8.5.5 and WebSphere Lombardi Edition 7.2 through 7.2.0.5 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2013-2251 Critical 2013-07-20 Protected by Waratek Exploited Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.