Overview 4 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
4matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
0public PoC0.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
4
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
4
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
4
100.0%
split by
peak 1 / month
Aug 171
Not applicable1
Medium1
not blocked1
No public exploit1
Sep 170
Oct 170
Nov 170
Dec 170
Jan 180
Feb 180
Mar 180
Apr 180
May 180
Jun 181
Not applicable1
Medium1
not blocked1
No public exploit1
Jul 180
Aug 180
Sep 180
Oct 180
Nov 181
Not applicable1
Critical1
not blocked1
No public exploit1
Dec 181
Not applicable1
Medium1
not blocked1
No public exploit1
Aug 17Oct 17Dec 17Feb 18Apr 18Jun 18Aug 18Oct 18Dec 18
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2018-19039 | Medium | 2018-12-13 | Not applicable | No public exploit | Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions. |
| CVE-2018-5495 | Critical | 2018-11-14 | Not applicable | No public exploit | All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to communicate with systems on the same network as the StorageGRID Webscale Admin Node via HTTP or to take over services on the Admin Node. |
| CVE-2018-12099 | Medium | 2018-06-11 | Not applicable | No public exploit | Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links. |
| CVE-2017-12422 | Medium | 2017-08-29 | Not applicable | No public exploit | NetApp StorageGRID Webscale 10.2.x before 10.2.2.3, 10.3.x before 10.3.0.4, and 10.4.x before 10.4.0.2 allow remote authenticated users to delete arbitrary objects via unspecified vectors. |