WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Oracle product: Oracle JD Edwards✕
Overview 4 matches · 3 in Waratek scope · 2 protected · 0 exploited · 0 CISA KEV · 1 EPSS ≥ 0.5
4matches 3in Waratek scope75.0% 2protected50.0% 0exploited0.0% 0CISA KEV0.0% 1EPSS ≥ 0.525.0%
Protected by Waratek 2 50.0% Rule in development 0 0.0% Mitigation candidate 1 25.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 1 25.0% Withdrawn CVE 0 0.0%
Critical 2 50.0% High 1 25.0% Medium 1 25.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 50.0% partly blocked 0 0.0% not blocked 2 50.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 4 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 2 / year
Not applicable: 1Mitigation candidate: 1Protected by Waratek: 2 Medium: 1High: 1Critical: 2 not blocked: 2blocked by ARMR today: 2 Working exploit published: 4
20172 Protected by Waratek2 Critical1 Medium1 blocked by ARMR today2 Working exploit published2 20180 20190 20201 Mitigation candidate1 Critical1 not blocked1 Working exploit published1 20210 20220 20230 20240 20251 Not applicable1 High1 not blocked1 Working exploit published1
201720182019202020212022202320242025
4 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2025-27210 High 2025-07-18 Not applicable Working exploit published An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX. This vulnerability affects Windows users of `path.join` API.
CVE-2020-2733 Critical 2020-04-15 Mitigation candidate Working exploit published Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2017-5645 Critical 2017-04-17 Protected by Waratek Working exploit published In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
CVE-2016-5725 Medium 2017-01-19 Protected by Waratek Working exploit published Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.