WaratekVRT Sign in
Reset
More filters (2)
Columns
Published to 2017-08-31✕Product oncommand shift✕
Overview 4 matches · 2 protected · 2 exploited · 2 CISA KEV · 1 public PoC · 2 EPSS ≥ 0.5
4matches 2protected50.0% 2exploited50.0% 2CISA KEV50.0% 1public PoC25.0% 2EPSS ≥ 0.550.0%
Protected by Waratek 2 50.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 2 50.0%
Critical 4 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 50.0% partly blocked 0 0.0% not blocked 2 50.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 50.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 2 50.0%
split by peak 2 / month
No exploit published: 2Protected by Waratek: 2 Critical: 4 not blocked: 2blocked by ARMR today: 2 No public exploit: 2Exploited: 2
Apr 161 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1 May 160 Jun 160 Jul 160 Aug 160 Sep 160 Oct 160 Nov 160 Dec 160 Jan 170 Feb 170 Mar 170 Apr 171 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1 May 170 Jun 170 Jul 170 Aug 172 No exploit published2 Critical2 not blocked2 No public exploit2
Apr 16Jun 16Aug 16Oct 16Dec 16Feb 17Apr 17Jun 17Aug 17
4 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2016-5018 Critical 2017-08-10 No exploit published No public exploit In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications.
CVE-2017-10102 Critical 2017-08-08 No exploit published No public exploit Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).
CVE-2016-8735 Critical 2017-04-06 Protected by Waratek Exploited Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.
CVE-2016-3427 Critical 2016-04-21 Protected by Waratek Exploited Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.