WaratekVRT Sign in

Critical Org.apache.hugegraph CVEs

3 CVEs, 1 exploited, 1 protected by Waratek

Reset
More filters (1)
Columns
Vendor org.apache.hugegraph✕
Overview 3 matches · 1 protected · 1 exploited · 1 CISA KEV · 2 public PoC · 2 EPSS ≥ 0.5
3matches 1protected33.3% 1exploited33.3% 1CISA KEV33.3% 2public PoC66.7% 2EPSS ≥ 0.566.7%
Protected by Waratek 1 33.3% Rule in development 0 0.0% Mitigation candidate 1 33.3% No exploit published 1 33.3%
Critical 3 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 33.3% partly blocked 0 0.0% not blocked 2 66.7% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 33.3% Working exploit published 1 33.3% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 1 33.3%
split by peak 2 / month
No exploit published: 1Mitigation candidate: 1Protected by Waratek: 1 Critical: 3 not blocked: 2blocked by ARMR today: 1 No public exploit: 1Working exploit published: 1Exploited: 1
Apr 242 Protected by Waratek1 No exploit published1 Critical2 blocked by ARMR today1 not blocked1 Exploited1 No public exploit1 May 240 Jun 240 Jul 240 Aug 240 Sep 240 Oct 240 Nov 240 Dec 241 Mitigation candidate1 Critical1 not blocked1 Working exploit published1
Apr 24May 24Jun 24Jul 24Aug 24Sep 24Oct 24Nov 24Dec 24
3 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2024-43441 Critical 2024-12-24 Mitigation candidate Working exploit published Authentication Bypass by Assumed-Immutable Data vulnerability in Apache HugeGraph-Server. This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.5.0. Users are recommended to upgrade to version 1.5.0, which fixes the issue.
CVE-2024-27349 Critical 2024-04-22 No exploit published No public exploit Authentication Bypass by Spoofing vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue.
CVE-2024-27348 Critical 2024-04-22 Protected by Waratek Exploited RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue.