WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product cloud manager✕
Overview 11 matches · 0 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
11matches 0in Waratek scope0.0% 0protected0.0% 1exploited9.1% 0CISA KEV0.0% 1public PoC9.1% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 11 100.0% Withdrawn CVE 0 0.0%
Critical 3 27.3% High 3 27.3% Medium 5 45.5% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 11 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 9.1% Working exploit published 0 0.0% Proof of concept only 1 9.1% Forecast only 0 0.0% No public exploit 9 81.8%
split by peak 5 / year
Not applicable: 11 Medium: 5High: 3Critical: 3 not blocked: 11 No public exploit: 9Proof of concept only: 1Exploited: 1
20111 Not applicable1 High1 not blocked1 No public exploit1 20120 20130 20141 Not applicable1 Medium1 not blocked1 No public exploit1 20150 20160 20170 20180 20191 Not applicable1 Medium1 not blocked1 No public exploit1 20201 Not applicable1 Critical1 not blocked1 No public exploit1 20211 Not applicable1 High1 not blocked1 Exploited1 20220 20235 Not applicable5 Critical2 High1 Medium2 not blocked5 Proof of concept only1 No public exploit4 20241 Not applicable1 Medium1 not blocked1 No public exploit1
2012201420162018202020222024
11 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2024-34012 Medium 2024-06-14 Not applicable No public exploit Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.24135.272.
CVE-2023-41748 Critical 2023-08-31 Not applicable No public exploit Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.23089.203.
CVE-2023-41747 Medium 2023-08-31 Not applicable No public exploit Sensitive information disclosure due to unauthenticated path traversal. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.23089.203.
CVE-2023-41746 Critical 2023-08-31 Not applicable No public exploit Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.23089.203.
CVE-2023-28166 High 2023-06-22 Not applicable No public exploit Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Aakif Kadiwala Tags Cloud Manager plugin <= 1.0.0 versions.
CVE-2023-0421 Medium 2023-05-08 Not applicable Proof of concept only The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before outputting it in an admin panel, allowing unauthenticated attackers to trick a logged in admin to trigger a XSS payload by clicking a link.
CVE-2021-23337 High 2021-02-15 Not applicable Exploited Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.
CVE-2019-17275 Critical 2020-02-26 Not applicable No public exploit OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers.
CVE-2019-4118 Medium 2019-07-11 Not applicable No public exploit IBM Multicloud Manager 3.1.0, 3.1.1, and 3.1.2 ibm-mcm-chart could allow a local attacker with admin privileges to obtain highly sensitive information upon deployment. IBM X-Force ID: 158144.
CVE-2014-5641 Medium 2014-09-09 Not applicable No public exploit The Cloud Manager (aka com.ileaf.cloud_manager) application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2011-2654 High 2011-09-06 Not applicable No public exploit The RPC implementation in the server in Novell Cloud Manager 1.1.2 before Patch 3 does not properly initialize objects, which allows remote attackers to execute arbitrary code by making RPC calls that leverage incorrect privileges associated with a partially initialized session.