WaratekVRT Sign in
Reset
More filters (2)
Columns
Published to 2013-10-31✕Product java✕
Overview 5 matches · 1 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
5matches 1exploited20.0% 0CISA KEV0.0% 1public PoC20.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 5 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 0 0.0% High 3 60.0% Medium 2 40.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 5 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 20.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 4 80.0%
split by peak 2 / quarter
Protected by Waratek: 5 Medium: 2High: 3 blocked by ARMR today: 5 No public exploit: 4Exploited: 1
Q3 091 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1 Q4 090 Q1 101 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1 Q2 100 Q3 100 Q4 100 Q1 110 Q2 110 Q3 110 Q4 110 Q1 120 Q2 120 Q3 120 Q4 120 Q1 130 Q2 130 Q3 132 Protected by Waratek2 High1 Medium1 blocked by ARMR today2 No public exploit2 Q4 131 Protected by Waratek1 Medium1 blocked by ARMR today1 Exploited1
Q4 09Q2 10Q4 10Q2 11Q4 11Q2 12Q4 12Q2 13Q4 13
5 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2013-3827 Medium 2013-10-16 Protected by Waratek Exploited Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.
CVE-2013-2172 Medium 2013-08-20 Protected by Waratek No public exploit jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak "canonicalization algorithm to apply to the SignedInfo part of the Signature."
CVE-2013-4002 High 2013-07-23 Protected by Waratek No public exploit XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names.
CVE-2010-0386 High 2010-01-25 Protected by Waratek No public exploit The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398.
CVE-2009-2723 High 2009-08-10 Protected by Waratek No public exploit Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, aka BugId 6444262.