Overview 11 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
11matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
1public PoC9.1%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
11
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
11
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
1
9.1%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
10
90.9%
split by
peak 3 / quarter
Q1 231
Not applicable1
Critical1
not blocked1
Working exploit published1
Q2 230
Q3 231
Not applicable1
High1
not blocked1
No public exploit1
Q4 231
Not applicable1
Critical1
not blocked1
No public exploit1
Q1 240
Q2 240
Q3 240
Q4 240
Q1 250
Q2 252
Not applicable2
High1
Medium1
not blocked2
No public exploit2
Q3 251
Not applicable1
High1
not blocked1
No public exploit1
Q4 253
Not applicable3
Medium3
not blocked3
No public exploit3
Q1 262
Not applicable2
High2
not blocked2
No public exploit2
Q1 23Q3 23Q1 24Q3 24Q1 25Q3 25Q1 26
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-28298 | High | 2026-03-26 | Not applicable | No public exploit | SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution. |
| CVE-2026-28297 | High | 2026-03-26 | Not applicable | No public exploit | SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution. |
| CVE-2025-40545 | Medium | 2025-11-18 | Not applicable | No public exploit | SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required. |
| CVE-2025-26391 | Medium | 2025-11-18 | Not applicable | No public exploit | SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL fields. This vulnerability requires authentication from a low-level account. |
| CVE-2025-26392 | Medium | 2025-10-21 | Not applicable | No public exploit | SolarWinds Observability Self-Hosted is susceptible to SQL injection vulnerability that may display sensitive data using a low-level account. This vulnerability requires authentication from a low-privilege account. |
| CVE-2025-26397 | High | 2025-07-24 | Not applicable | No public exploit | SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with low privileges can escalate privileges to run malicious files copied to a permission-protected folder. This vulnerability requires authentication from a low-level account and local access to the host server. |
| CVE-2025-26395 | High | 2025-06-10 | Not applicable | No public exploit | SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL. The attack requires authentication using an administrator-level account and user interaction is required. |
| CVE-2025-26394 | Medium | 2025-06-10 | Not applicable | No public exploit | SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required. |
| CVE-2023-37404 | Critical | 2023-10-04 | Not applicable | No public exploit | IBM Observability with Instana 1.0.243 through 1.0.254 could allow an attacker on the network to execute arbitrary code on the host after a successful DNS poisoning attack. IBM X-Force ID: 259789. |
| CVE-2023-0813 | High | 2023-09-15 | Not applicable | No public exploit | A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without authentication. |
| CVE-2023-27290 | Critical | 2023-03-03 | Not applicable | Working exploit published | Docker based datastores for IBM Instana (IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and 243-0) do not currently require authentication. Due to this, an attacker within the network could access the datastores with read/write access. IBM X-Force ID: 248737. |