WaratekVRT Sign in

CWE-863 CVEs with a working exploit

4 CVEs, 1 protected by Waratek

Reset
More filters (1)
Columns
CWE CWE-863✕
Overview 4 matches · 1 protected · 0 exploited · 0 CISA KEV · 1 EPSS ≥ 0.5
4matches 1protected25.0% 0exploited0.0% 0CISA KEV0.0% 1EPSS ≥ 0.525.0%
Protected by Waratek 1 25.0% Rule in development 0 0.0% Mitigation candidate 3 75.0% No exploit published 0 0.0%
Critical 0 0.0% High 2 50.0% Medium 2 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 25.0% partly blocked 0 0.0% not blocked 3 75.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 4 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 1 / quarter
Mitigation candidate: 3Protected by Waratek: 1 Medium: 2High: 2 not blocked: 3blocked by ARMR today: 1 Working exploit published: 4
Q2 211 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 Q3 210 Q4 210 Q1 220 Q2 220 Q3 220 Q4 220 Q1 230 Q2 230 Q3 231 Mitigation candidate1 High1 not blocked1 Working exploit published1 Q4 230 Q1 241 Mitigation candidate1 High1 not blocked1 Working exploit published1 Q2 240 Q3 240 Q4 240 Q1 250 Q2 250 Q3 250 Q4 251 Mitigation candidate1 Medium1 not blocked1 Working exploit published1
Q2 21Q4 21Q2 22Q4 22Q2 23Q4 23Q2 24Q4 24Q2 25Q4 25
4 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2025-11580 Medium 2025-10-10 Mitigation candidate Working exploit published A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2024-25420 High 2024-03-26 Mitigation candidate Working exploit published An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authorizedJIDs system property component.
CVE-2023-40315 High 2023-08-17 Mitigation candidate Working exploit published In OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 and related Meridian versions, any user that has the ROLE_FILESYSTEM_EDITOR can easily escalate their privileges to ROLE_ADMIN or any other role. The solution is to upgrade to Meridian 2023.1.5 or Horizon 32.0.2 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. OpenNMS thanks Erik Wynter for reporting this issue.
CVE-2021-28164 Medium 2021-04-01 Protected by Waratek Working exploit published In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.