Skip to contentThe Eclipse Foundation vulnerabilities
Newest
- eclipse jetty, the eclipse foundation eclipse jetty, jenkins +19 more +21 moreJetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resourcesCVE-2021-28165Public exploitFix availableEPSS 53.9%7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, netapp cloud manager +15 more +17 moreAuthorization Before Parsing and Canonicalization in jettyCVE-2021-28164Public exploitFix availableEPSS 82.4%5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache ignite +21 more +23 moreDirectory exposure in jettyCVE-2021-28163Fix available2.7 Low
- eclipse theia, the eclipse foundation eclipse theia +1 moreCommand Injection in @theia/messagesCVE-2021-28162Fix available6.1 Medium
- eclipse theia, the eclipse foundation eclipse theia +1 moreImproper Neutralization of Input in Theia consoleCVE-2021-28161Fix available6.1 Medium
- eclipse platform, the eclipse foundation eclipse platform +1 moreIn versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate...CVE-2020-27225Fix available7.8 High
- eclipse jetty, the eclipse foundation eclipse jetty, apache nifi +14 more +16 moreDOS vulnerability for Quoted Quality CSV headersCVE-2020-27223Public exploitFix availableEPSS 78.0%5.2 Medium
- eclipse theia, the eclipse foundation eclipse theia +1 moreCross-site Scripting (XSS) in Eclipse TheiaCVE-2020-27224Fix available9.6 Critical
- eclipse californium, the eclipse foundation eclipse californium +1 moreIn Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS...CVE-2020-272227.5 High
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse OpenJ9 up to version 0.23, there is potential for a stack-based buffer overflow when...CVE-2020-272219.8 Critical
- eclipse hono, the eclipse foundation eclipse hono +1 moreThe Eclipse Hono AMQP and MQTT protocol adapters do not check whether an authenticated gateway...CVE-2020-272208.8 High
- eclipse hawkbit, the eclipse foundation eclipse hawkbit +1 moreCross-site Scripting in Eclipse HawkbitCVE-2020-27219Public exploitFix available6.1 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache kafka +15 more +17 moreBuffer not correctly recycled in Gzip Request inflationCVE-2020-27218Fix available4.8 Medium
- eclipse hono, the eclipse foundation eclipse hono +1 moreImproper Validation of Specified Quantity in Input in Eclipse HonoCVE-2020-27217Fix available7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, apache beam +16 more +18 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2020-27216Fix available7.0 High
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 morePath Traversal in Eclipse VertCVE-2019-17640Public exploitFix available9.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method...CVE-2019-176395.3 Medium
- eclipse web tools platform, the eclipse foundation eclipse web tools platform, debian linux +2 moreIn all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files...CVE-2019-17637Fix available7.1 High
- eclipse jetty, the eclipse foundation eclipse jetty +1 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2019-17638Public exploitFix availableEPSS 11.1%9.4 Critical
- eclipse che, red hat eclipse che +1 moreMissing Authorization in Eclipse CheCVE-2020-106896.4 Medium
- eclipse theia, the eclipse foundation eclipse theia +1 moreInsufficient Verification of Data Authenticity in Eclipse TheiaCVE-2019-17636Fix available8.1 High
- eclipse memory analyzer, the eclipse foundation eclipse memory analyzer +1 moreEclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability...CVE-2019-176357.8 High
- eclipse memory analyzer, the eclipse foundation eclipse memory analyzer +1 moreEclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS)...CVE-2019-176349.0 Critical
- eclipse che, the eclipse foundation eclipse che +1 moreFor Eclipse Che versions 6.16 to 7.3.0, with both authentication and TLS disabled, visiting a...CVE-2019-17633Public exploit8.8 High
- eclipse jetty, the eclipse foundation eclipse jetty +1 moreUnescaped exception messages in error responses in JettyCVE-2019-17632Fix available6.1 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +5 more +7 moreFrom Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or...CVE-2019-176319.1 Critical
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, canonical ubuntu linux +4 more +6 moreIn Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE...CVE-2019-11779Fix available6.5 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIf an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last...CVE-2019-11778Fix available5.4 Medium
- eclipse omr, the eclipse foundation eclipse omr +1 morePrior to 0.1, all builds of Eclipse OMR contain a bug where the loop versioner may fail to...CVE-2019-117747.4 High
- eclipse omr, the eclipse foundation eclipse omr +1 morePrior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection...CVE-2019-117737.8 High
- eclipse paho java client, the eclipse foundation eclipse paho +1 moreImproper Handling of Exceptional Conditions and Origin Validation Error in Eclipse Paho Java client libraryCVE-2019-11777Fix available7.5 High
- the eclipse foundation eclipse birt, eclipse business intelligence and reporting tools +1 moreIn Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter....CVE-2019-117766.1 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreAll builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to...CVE-2019-117757.4 High
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not...CVE-2019-117729.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreAIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code...CVE-2019-117717.8 High
- eclipse buildship, the eclipse foundation eclipse buildship +1 moreIn Eclipse Buildship versions prior to 3.1.1, the build files indicate that this project is...CVE-2019-117708.1 High
- eclipse xtend, xtext, the eclipse foundation eclipse xtext +2 morePotentially compromised buildsCVE-2019-10249Fix available8.1 High
- eclipse vorto, the eclipse foundation eclipse vorto +1 moreEclipse Vorto resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPSCVE-2019-10248Fix available8.1 High
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +24 more +26 moreInstallation information leak in Eclipse JettyCVE-2019-10247Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, netapp element +23 more +25 moreInformation Exposure vulnerability in Eclipse JettyCVE-2019-10246Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache activemq +5 more +7 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2019-10241Fix available6.1 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +4 more +6 moreIn Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a...CVE-2019-102457.5 High
- eclipse kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions up to 4.0.0, the Web UI package and component services, the Artemis...CVE-2019-102447.5 High
- eclipse kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its...CVE-2019-102435.3 Medium
- eclipse kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during...CVE-2019-102425.3 Medium
- eclipse hawkbit, the eclipse foundation eclipse hawkbit +1 moreCleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBitCVE-2019-10240Fix available8.1 High
- eclipse jetty, the eclipse foundation eclipse jetty, fedoraproject fedora +2 moreUncontrolled Resource Consumption in org.eclipse.jetty:jetty-serverCVE-2018-12545Fix available7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 moreIn Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in...CVE-2017-7655Fix available7.5 High
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreIn Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on...CVE-2018-125499.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreIn Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native...CVE-2018-125479.8 Critical
- Show moreLoading…