WaratekVRT Sign in
Reset
More filters (3)
Columns
Published from 2003-01-01✕Published to 2003-12-31✕Vendor apache✕
Overview 7 matches · 1 protected · 0 exploited · 0 CISA KEV · 3 public PoC · 0 EPSS ≥ 0.5
7matches 1protected14.3% 0exploited0.0% 0CISA KEV0.0% 3public PoC42.9% 0EPSS ≥ 0.50.0%
Protected by Waratek 1 14.3% Rule in development 0 0.0% Mitigation candidate 2 28.6% No exploit published 4 57.1%
Critical 0 0.0% High 1 14.3% Medium 6 85.7% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 14.3% partly blocked 0 0.0% not blocked 6 85.7% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 3 42.9% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 4 57.1%
split by peak 4 / month
No exploit published: 4Mitigation candidate: 2Protected by Waratek: 1 Medium: 6High: 1 not blocked: 6blocked by ARMR today: 1 No public exploit: 4Working exploit published: 3
Jan 031 No exploit published1 High1 not blocked1 No public exploit1 Feb 034 Protected by Waratek1 No exploit published3 Medium4 blocked by ARMR today1 not blocked3 Working exploit published1 No public exploit3 Mar 030 Apr 030 May 030 Jun 030 Jul 030 Aug 030 Sep 030 Oct 031 Mitigation candidate1 Medium1 not blocked1 Working exploit published1 Nov 031 Mitigation candidate1 Medium1 not blocked1 Working exploit published1
Jan 03Feb 03Mar 03Apr 03May 03Jun 03Jul 03Aug 03Sep 03Oct 03Nov 03
7 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2003-0866 Medium 2003-11-17 Mitigation candidate Working exploit published The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.
CVE-2002-1567 Medium 2003-10-06 Mitigation candidate Working exploit published Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.
CVE-2003-0045 Medium 2003-02-07 No exploit published No public exploit Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp.
CVE-2003-0044 Medium 2003-02-07 No exploit published No public exploit Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML.
CVE-2003-0043 Medium 2003-02-07 No exploit published No public exploit Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.
CVE-2003-0042 Medium 2003-02-07 Protected by Waratek Working exploit published Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.
CVE-2002-1394 High 2003-01-17 No exploit published No public exploit Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.