WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product observability✕
Overview 15 matches · 3 in Waratek scope · 0 protected · 1 exploited · 1 CISA KEV · 2 public PoC · 1 EPSS ≥ 0.5
15matches 3in Waratek scope20.0% 0protected0.0% 1exploited6.7% 1CISA KEV6.7% 2public PoC13.3% 1EPSS ≥ 0.56.7%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 6.7% No exploit published 2 13.3% Outside Waratek scope 1 6.7% Not applicable 11 73.3% Withdrawn CVE 0 0.0%
Critical 2 13.3% High 7 46.7% Medium 6 40.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 15 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 6.7% Working exploit published 1 6.7% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 13 86.7%
split by peak 3 / quarter
Not applicable: 11Outside Waratek scope: 1No exploit published: 2Mitigation candidate: 1 Medium: 6High: 7Critical: 2 not blocked: 15 No public exploit: 13Working exploit published: 1Exploited: 1
Q1 231 Not applicable1 Critical1 not blocked1 Working exploit published1 Q2 230 Q3 231 Not applicable1 High1 not blocked1 No public exploit1 Q4 232 Mitigation candidate1 Not applicable1 Critical1 High1 not blocked2 Exploited1 No public exploit1 Q1 240 Q2 240 Q3 242 No exploit published2 Medium2 not blocked2 No public exploit2 Q4 240 Q1 250 Q2 252 Not applicable2 High1 Medium1 not blocked2 No public exploit2 Q3 251 Not applicable1 High1 not blocked1 No public exploit1 Q4 253 Not applicable3 Medium3 not blocked3 No public exploit3 Q1 263 Outside Waratek scope1 Not applicable2 High3 not blocked3 No public exploit3
Q1 23Q3 23Q1 24Q3 24Q1 25Q3 25Q1 26
15 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-28298 High 2026-03-26 Not applicable No public exploit SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.
CVE-2026-28297 High 2026-03-26 Not applicable No public exploit SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.
CVE-2026-29063 High 2026-03-06 Outside Waratek scope No public exploit Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.
CVE-2025-40545 Medium 2025-11-18 Not applicable No public exploit SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required.
CVE-2025-26391 Medium 2025-11-18 Not applicable No public exploit SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL fields. This vulnerability requires authentication from a low-level account.
CVE-2025-26392 Medium 2025-10-21 Not applicable No public exploit SolarWinds Observability Self-Hosted is susceptible to SQL injection vulnerability that may display sensitive data using a low-level account. This vulnerability requires authentication from a low-privilege account.
CVE-2025-26397 High 2025-07-24 Not applicable No public exploit SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with low privileges can escalate privileges to run malicious files copied to a permission-protected folder. This vulnerability requires authentication from a low-level account and local access to the host server.
CVE-2025-26395 High 2025-06-10 Not applicable No public exploit SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL. The attack requires authentication using an administrator-level account and user interaction is required.
CVE-2025-26394 Medium 2025-06-10 Not applicable No public exploit SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required.
CVE-2024-39901 Medium 2024-07-09 No exploit published No public exploit OpenSearch Observability is collection of plugins and applications that visualize data-driven events. An issue in the OpenSearch observability plugins allows unintended access to private tenant resources like notebooks. The system did not properly check if the user was the resource author when accessing resources in a private tenant, leading to potential data being revealed. The patches are included in OpenSearch 2.14.
CVE-2024-39900 Medium 2024-07-09 No exploit published No public exploit OpenSearch Dashboards Reports allows ‘Report Owner’ export and share reports from OpenSearch Dashboards. An issue in the OpenSearch reporting plugin allows unintended access to private tenant resources like notebooks. The system did not properly check if the user was the resource author when accessing resources in a private tenant, leading to potential data being revealed. The patches are included in OpenSearch 2.14.
CVE-2023-44487 High 2023-10-10 Mitigation candidate Exploited The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-37404 Critical 2023-10-04 Not applicable No public exploit IBM Observability with Instana 1.0.243 through 1.0.254 could allow an attacker on the network to execute arbitrary code on the host after a successful DNS poisoning attack. IBM X-Force ID: 259789.
CVE-2023-0813 High 2023-09-15 Not applicable No public exploit A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without authentication.
CVE-2023-27290 Critical 2023-03-03 Not applicable Working exploit published Docker based datastores for IBM Instana (IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and 243-0) do not currently require authentication. Due to this, an attacker within the network could access the datastores with read/write access. IBM X-Force ID: 248737.