javadelight records
2 published records for vendor javadelight.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 50%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-1333 Inefficient Regular Expression Complexity1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
30Monitor | CVE-2021-40660No exploit | An issue was discovered in Delight Nashorn Sandbox 0.2.0.javadelight · nashorn sandbox · CWE-1333 | High7.5 | 1.0%Jun 14, 2022 |
28Monitor | CVE-2023-26919No exploit | delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape.javadelight · nashorn sandbox · CWE-74 | High7.2 | 0.6%Apr 10, 2023 |
- CVE-2021-4066030Monitor
An issue was discovered in Delight Nashorn Sandbox 0.2.0.
HighCVSS 7.5No exploitEPSS 1%javadelight · nashorn sandboxJun 14, 2022
- CVE-2023-2691928Monitor
delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape.
HighCVSS 7.2No exploitEPSS 0%javadelight · nashorn sandboxApr 10, 2023