https://pwn.watch/t/java Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:23:59 GMT https://pwn.watch/i/oracle-http-server-and-oracle-weblogic-server-proxy-plug-in-cve-2026-21962 oracle-http-server-and-oracle-weblogic-server-proxy-plug-in-cve-2026-21962:2026-08-24:CISA added CVE-2026-21962 to the KEV catalog (due 2026-08-27). Mon, 24 Aug 2026 00:00:00 GMT high Status: closed, patched https://pwn.watch/i/apache-tomcat-cve-2026-34486 apache-tomcat-cve-2026-34486:2026-08-04:CISA added CVE-2026-34486 to the KEV catalog (due 2026-08-07). Tue, 04 Aug 2026 00:00:00 GMT high Status: closed, patched https://pwn.watch/i/apache-activemq-cve-2026-34197 apache-activemq-cve-2026-34197:2026-04-16:CISA added CVE-2026-34197 to the KEV catalog (due 2026-04-30). Thu, 16 Apr 2026 00:00:00 GMT high Status: closed, patched https://pwn.watch/i/osgeo-geoserver-cve-2025-58360 osgeo-geoserver-cve-2025-58360:2025-12-11:CISA added CVE-2025-58360 to the KEV catalog (due 2026-01-01). Thu, 11 Dec 2025 00:00:00 GMT high Status: closed, patched https://pwn.watch/i/xwiki-platform-cve-2025-24893 xwiki-platform-cve-2025-24893:2025-10-30:CISA added CVE-2025-24893 to the KEV catalog (due 2025-11-20). Thu, 30 Oct 2025 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/jenkins-cve-2017-1000353 jenkins-cve-2017-1000353:2025-10-02:CISA added CVE-2017-1000353 to the KEV catalog (due 2025-10-23). Thu, 02 Oct 2025 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/apache-tomcat-cve-2025-24813 apache-tomcat-cve-2025-24813:2025-04-01:CISA added CVE-2025-24813 to the KEV catalog (due 2025-04-22). Tue, 01 Apr 2025 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/apache-ofbiz-cve-2024-45195 apache-ofbiz-cve-2024-45195:2025-02-04:CISA added CVE-2024-45195 to the KEV catalog (due 2025-02-25). Tue, 04 Feb 2025 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/oracle-weblogic-server-cve-2020-2883 oracle-weblogic-server-cve-2020-2883:2025-01-07:CISA added CVE-2020-2883 to the KEV catalog (due 2025-01-28). Tue, 07 Jan 2025 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/atlassian-jira-server-and-data-center-cve-2021-26086 atlassian-jira-server-and-data-center-cve-2021-26086:2024-11-12:CISA added CVE-2021-26086 to the KEV catalog (federal deadline 2024-12-03) Tue, 12 Nov 2024 00:00:00 GMT medium Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/oracle-adf-faces-cve-2022-21445 oracle-adf-faces-cve-2022-21445:2024-09-18:CISA added CVE-2022-21445 to the KEV catalog (federal deadline 2024-10-09) Wed, 18 Sep 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/oracle-weblogic-server-cve-2020-14644 oracle-weblogic-server-cve-2020-14644:2024-09-18:CISA added CVE-2020-14644 to the KEV catalog (federal deadline 2024-10-09) Wed, 18 Sep 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/apache-hugegraph-server-cve-2024-27348 apache-hugegraph-server-cve-2024-27348:2024-09-18:CISA added CVE-2024-27348 to the KEV catalog (federal deadline 2024-10-09) Wed, 18 Sep 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/apache-ofbiz-cve-2024-38856 apache-ofbiz-cve-2024-38856:2024-08-27:CISA added CVE-2024-38856 to the KEV catalog (federal deadline 2024-09-17) Tue, 27 Aug 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/jenkins-cli-arbitrary-file-read-cve-2024-23897 jenkins-cli-arbitrary-file-read-cve-2024-23897:2024-08-19:CISA added CVE-2024-23897 to the KEV catalog (federal deadline 2024-09-09) Mon, 19 Aug 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/apache-ofbiz-cve-2024-32113 apache-ofbiz-cve-2024-32113:2024-08-07:CISA added CVE-2024-32113 to the KEV catalog (federal deadline 2024-08-28) Wed, 07 Aug 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/apache-ofbiz-cve-2024-38856 apache-ofbiz-cve-2024-38856:2024-08-05:CVE-2024-38856 published Mon, 05 Aug 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-38856 Status: closed, patched https://pwn.watch/i/osgeo-geoserver-cve-2024-36401 osgeo-geoserver-cve-2024-36401:2024-07-15:CISA added CVE-2024-36401 to the KEV catalog (federal deadline 2024-08-05) Mon, 15 Jul 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/osgeo-geoserver-cve-2024-36401 osgeo-geoserver-cve-2024-36401:2024-07-01:CVE-2024-36401 published Mon, 01 Jul 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-36401 Status: closed, patched https://pwn.watch/i/osgeo-jai-ext-cve-2022-24816 osgeo-jai-ext-cve-2022-24816:2024-06-26:CISA added CVE-2022-24816 to the KEV catalog (federal deadline 2024-07-17) Wed, 26 Jun 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/oracle-weblogic-server-cve-2017-3506 oracle-weblogic-server-cve-2017-3506:2024-06-03:CISA added CVE-2017-3506 to the KEV catalog (federal deadline 2024-06-24) Mon, 03 Jun 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/apache-flink-cve-2020-17519 apache-flink-cve-2020-17519:2024-05-23:CISA added CVE-2020-17519 to the KEV catalog (federal deadline 2024-06-13) Thu, 23 May 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/nextgen-healthcare-mirth-connect-cve-2023-43208 nextgen-healthcare-mirth-connect-cve-2023-43208:2024-05-20:CISA added CVE-2023-43208 to the KEV catalog (federal deadline 2024-06-10) Mon, 20 May 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/apache-ofbiz-cve-2024-32113 apache-ofbiz-cve-2024-32113:2024-05-08:CVE-2024-32113 published Wed, 08 May 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-32113 Status: closed, patched https://pwn.watch/i/apache-hugegraph-server-cve-2024-27348 apache-hugegraph-server-cve-2024-27348:2024-04-22:CVE-2024-27348 published Mon, 22 Apr 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-27348 Status: closed, patched https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2024-27198-27199 jetbrains-teamcity-auth-bypass-cve-2024-27198-27199:2024-03-07:CISA added CVE-2024-27198 to the KEV catalog (federal deadline 2024-03-28) Thu, 07 Mar 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2024-27198-27199 jetbrains-teamcity-auth-bypass-cve-2024-27198-27199:2024-03-04:CVE-2024-27198 published Mon, 04 Mar 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-27198 Status: closed, patched https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2024-27198-27199 jetbrains-teamcity-auth-bypass-cve-2024-27198-27199:2024-03-04:CVE-2024-27199 published Mon, 04 Mar 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-27199 Status: closed, patched https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2024-27198-27199 jetbrains-teamcity-auth-bypass-cve-2024-27198-27199:2024-03-04:JetBrains releases TeamCity 2023.11.4; Rapid7 publishes details of both auth bypasses Mon, 04 Mar 2024 00:00:00 GMT critical Source: https://blog.jetbrains.com/teamcity/2024/03/additional-critical-security-issues-affecting-teamcity-on-premises-cve-2024-27198-and-cve-2024-27199-update-to-2023-11-4-now/ Status: closed, patched https://pwn.watch/i/jenkins-cli-arbitrary-file-read-cve-2024-23897 jenkins-cli-arbitrary-file-read-cve-2024-23897:2024-01-24:CVE-2024-23897 published Wed, 24 Jan 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-23897 Status: closed, patched https://pwn.watch/i/jenkins-cli-arbitrary-file-read-cve-2024-23897 jenkins-cli-arbitrary-file-read-cve-2024-23897:2024-01-24:Jenkins security advisory and fixed releases Wed, 24 Jan 2024 00:00:00 GMT critical Source: https://www.jenkins.io/security/advisory/2024-01-24/ Status: closed, patched https://pwn.watch/i/atlassian-confluence-data-center-and-server-cve-2023-22527 atlassian-confluence-data-center-and-server-cve-2023-22527:2024-01-24:CISA added CVE-2023-22527 to the KEV catalog (federal deadline 2024-02-14) Wed, 24 Jan 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/atlassian-confluence-data-center-and-server-cve-2023-22527 atlassian-confluence-data-center-and-server-cve-2023-22527:2024-01-16:CVE-2023-22527 published Tue, 16 Jan 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2023-22527 Status: closed, patched https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518 atlassian-confluence-improper-authorization-cve-2023-22518:2023-11-07:CISA adds CVE-2023-22518 to the KEV catalog Tue, 07 Nov 2023 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518 atlassian-confluence-improper-authorization-cve-2023-22518:2023-11-06:Atlassian raises the CVSS score to 10 after active exploitation and Cerber ransomware deployments Mon, 06 Nov 2023 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/apache-activemq-openwire-rce-cve-2023-46604 apache-activemq-openwire-rce-cve-2023-46604:2023-11-02:CISA adds CVE-2023-46604 to the KEV catalog Thu, 02 Nov 2023 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/apache-activemq-openwire-rce-cve-2023-46604 apache-activemq-openwire-rce-cve-2023-46604:2023-11-01:Rapid7 reports exploitation in two customer environments, attempting to deploy HelloKitty ransomware Wed, 01 Nov 2023 00:00:00 GMT critical Source: https://www.rapid7.com/blog/post/2023/11/01/etr-suspected-exploitation-of-apache-activemq-cve-2023-46604/ Status: closed, patched https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518 atlassian-confluence-improper-authorization-cve-2023-22518:2023-10-31:Atlassian discloses CVE-2023-22518 and ships fixes Tue, 31 Oct 2023 00:00:00 GMT critical Source: https://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html Status: closed, patched https://pwn.watch/i/apache-activemq-openwire-rce-cve-2023-46604 apache-activemq-openwire-rce-cve-2023-46604:2023-10-27:Apache publishes the CVE-2023-46604 announcement; fixed releases already out Fri, 27 Oct 2023 00:00:00 GMT critical Source: https://activemq.apache.org/security-advisories.data/CVE-2023-46604-announcement.txt Status: closed, patched https://pwn.watch/i/atlassian-confluence-admin-creation-cve-2023-22515 atlassian-confluence-admin-creation-cve-2023-22515:2023-10-16:CISA, FBI and MS-ISAC joint advisory AA23-289A on active exploitation Mon, 16 Oct 2023 00:00:00 GMT critical Source: https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-289a Status: closed, patched https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487 http2-rapid-reset-ddos-cve-2023-44487:2023-10-10:Coordinated disclosure by Google, Cloudflare and AWS; CISA adds CVE-2023-44487 to KEV Tue, 10 Oct 2023 00:00:00 GMT high Source: https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack Status: closed, patched https://pwn.watch/i/atlassian-confluence-admin-creation-cve-2023-22515 atlassian-confluence-admin-creation-cve-2023-22515:2023-10-05:CISA adds CVE-2023-22515 to the KEV catalog Thu, 05 Oct 2023 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/atlassian-confluence-admin-creation-cve-2023-22515 atlassian-confluence-admin-creation-cve-2023-22515:2023-10-04:Atlassian discloses the zero-day after customer reports and ships fixes Wed, 04 Oct 2023 00:00:00 GMT critical Source: https://confluence.atlassian.com/security/cve-2023-22515-broken-access-control-vulnerability-in-confluence-data-center-and-server-1295682276.html Status: closed, patched https://pwn.watch/i/apache-rocketmq-cve-2023-33246 apache-rocketmq-cve-2023-33246:2023-09-06:CISA added CVE-2023-33246 to the KEV catalog (due 2023-09-27). Wed, 06 Sep 2023 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487 http2-rapid-reset-ddos-cve-2023-44487:2023-08-25:Cloudflare starts seeing unusually large HTTP/2 attacks Fri, 25 Aug 2023 00:00:00 GMT high Source: https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/ Status: closed, patched https://pwn.watch/i/oracle-weblogic-server-cve-2023-21839 oracle-weblogic-server-cve-2023-21839:2023-05-01:CISA added CVE-2023-21839 to the KEV catalog (due 2023-05-22). Mon, 01 May 2023 00:00:00 GMT high Status: closed, patched https://pwn.watch/i/apache-spark-cve-2022-33891 apache-spark-cve-2022-33891:2023-03-07:CISA added CVE-2022-33891 to the KEV catalog (due 2023-03-28). Tue, 07 Mar 2023 00:00:00 GMT high Status: closed, patched https://pwn.watch/i/zk-framework-auuploader-cve-2022-36537 zk-framework-auuploader-cve-2022-36537:2023-02-27:CISA added CVE-2022-36537 to the KEV catalog (due 2023-03-20). Mon, 27 Feb 2023 00:00:00 GMT high Status: closed, patched