WaratekVRT Sign in

Dependency-check CVEs

5 CVEs, 2 protected by Waratek

Reset
More filters (1)
Columns
Product dependency-check✕
Overview 5 matches · 2 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
5matches 2protected40.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 2 40.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 3 60.0%
Critical 0 0.0% High 3 60.0% Medium 2 40.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 40.0% partly blocked 0 0.0% not blocked 3 60.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 1 20.0% Forecast only 0 0.0% No public exploit 4 80.0%
split by peak 2 / year
No exploit published: 3Protected by Waratek: 2 Medium: 2High: 3 not blocked: 3blocked by ARMR today: 2 No public exploit: 4Proof of concept only: 1
20171 No exploit published1 Medium1 not blocked1 No public exploit1 20181 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1 20190 20200 20211 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1 20220 20230 20242 No exploit published2 High1 Medium1 not blocked2 Proof of concept only1 No public exploit1
20172018201920202021202220232024
5 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2024-28153 High 2024-03-06 No exploit published No public exploit Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting (XSS) vulnerability.
CVE-2024-23686 Medium 2024-01-19 No exploit published Proof of concept only DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.
CVE-2021-43577 High 2021-11-12 Protected by Waratek No public exploit Jenkins OWASP Dependency-Check Plugin 5.1.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVE-2018-12036 High 2018-06-07 Protected by Waratek No public exploit OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.
CVE-2017-1000109 Medium 2017-10-05 No exploit published No public exploit The custom Details view of the Static Analysis Utilities based OWASP Dependency-Check Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view.