Overview 7 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
7matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
0public PoC0.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
7
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
7
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
7
100.0%
split by
peak 2 / year
20101
Not applicable1
High1
not blocked1
No public exploit1
20110
20122
Not applicable2
High2
not blocked2
No public exploit2
20131
Not applicable1
High1
not blocked1
No public exploit1
20140
20150
20161
Not applicable1
High1
not blocked1
No public exploit1
20170
20182
Not applicable2
High2
not blocked2
No public exploit2
201020112012201320142015201620172018
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2016-8528 | High | 2018-02-15 | Not applicable | No public exploit | A Remote Escalation of Privilege vulnerability in HPE Helion Eucalyptus version 3.3.0 through 4.3.1 was found. |
| CVE-2016-8520 | High | 2018-02-15 | Not applicable | No public exploit | HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs. In some cases, authenticated users with S3 permissions could also access versioned data. |
| CVE-2015-6861 | High | 2016-01-05 | Not applicable | No public exploit | HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account. |
| CVE-2013-4767 | High | 2013-10-10 | Not applicable | No public exploit | Unspecified vulnerability in Eucalyptus before 3.3.2 has unknown impact and attack vectors. |
| CVE-2012-3241 | High | 2012-07-17 | Not applicable | No public exploit | The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows remote attackers to execute arbitrary VMware Broker API commands. |
| CVE-2012-3240 | High | 2012-07-17 | Not applicable | No public exploit | The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges via a crafted REST request. |
| CVE-2010-3905 | High | 2010-12-22 | Not applicable | No public exploit | The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users. |