WaratekVRT Sign in
Reset
More filters (1)
Columns
Published to 2001-12-31✕
Overview 15 matches · 1 protected · 0 exploited · 0 CISA KEV · 2 public PoC · 0 EPSS ≥ 0.5
15matches 1protected6.7% 0exploited0.0% 0CISA KEV0.0% 2public PoC13.3% 0EPSS ≥ 0.50.0%
Protected by Waratek 1 6.7% Rule in development 0 0.0% Mitigation candidate 2 13.3% No exploit published 12 80.0%
Critical 0 0.0% High 15 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 6.7% partly blocked 0 0.0% not blocked 14 93.3% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 2 13.3% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 13 86.7%
split by peak 3 / quarter
No exploit published: 12Mitigation candidate: 2Protected by Waratek: 1 High: 15 not blocked: 14blocked by ARMR today: 1 No public exploit: 13Working exploit published: 2
Q1 961 No exploit published1 High1 not blocked1 No public exploit1 Q2 960 Q3 960 Q4 960 Q1 970 Q2 970 Q3 970 Q4 970 Q1 980 Q2 980 Q3 980 Q4 980 Q1 991 No exploit published1 High1 not blocked1 No public exploit1 Q2 990 Q3 990 Q4 991 No exploit published1 High1 not blocked1 No public exploit1 Q1 000 Q2 002 No exploit published2 High2 not blocked2 No public exploit2 Q3 000 Q4 003 Mitigation candidate2 No exploit published1 High3 not blocked3 Working exploit published2 No public exploit1 Q1 010 Q2 011 No exploit published1 High1 not blocked1 No public exploit1 Q3 013 Protected by Waratek1 No exploit published2 High3 blocked by ARMR today1 not blocked2 No public exploit3 Q4 013 No exploit published3 High3 not blocked3 No public exploit3
Q2 96Q4 96Q2 97Q4 97Q2 98Q4 98Q2 99Q4 99Q2 00Q4 00Q2 01Q4 01
15 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2001-1563 High 2001-12-31 No exploit published No public exploit Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this issue is already covered by other CVE identifiers.
CVE-2001-1480 High 2001-12-31 No exploit published No public exploit Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard.
CVE-2001-0824 High 2001-12-06 No exploit published No public exploit Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page.
CVE-2001-0962 High 2001-09-19 No exploit published No public exploit IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing.
CVE-2001-0591 High 2001-08-22 Protected by Waratek No public exploit Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' (dot dot) attack.
CVE-2001-0528 High 2001-08-14 No exploit published No public exploit Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext in a debug file, which allows local users to obtain the password and gain privileges.
CVE-2001-0326 High 2001-05-03 No exploit published No public exploit Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the <<ALL FILES>> FilePermission.
CVE-2000-1238 High 2000-12-31 No exploit published No public exploit BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / (forward slash) characters before the restricted pages.
CVE-2000-0685 High 2000-10-20 Mitigation candidate Working exploit published BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file.
CVE-2000-0684 High 2000-10-20 Mitigation candidate Working exploit published BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file.
CVE-2000-0499 High 2000-06-08 No exploit published No public exploit The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
CVE-2000-0497 High 2000-06-08 No exploit published No public exploit IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
CVE-1999-0852 High 1999-12-02 No exploit published No public exploit IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.
CVE-1999-0440 High 1999-03-01 No exploit published No public exploit The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
CVE-1999-0142 High 1996-03-01 No exploit published No public exploit The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts.