Eclipse vulnerabilities
16 published CVEs name Eclipse among the affected products.
- 16Published CVEs16 of them scored
- 2Last 12 monthspublished in the last year
- 3Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2023-54344
Eclipse Equinox OSGi 3.7.2 Remote Code Execution via Console
Eclipse · Equinox OSGi
Critical9.3 - CVE-2023-54342
Eclipse Equinox OSGi 3.8-3.18 Console Remote Code Execution
Eclipse · Equinox OSGi
Critical9.3 - CVE-2023-5632
Unconditionally adding an event to the epoll causes excessive CPU consumption
Eclipse · Mosquitto
High7.5 - CVE-2023-36478
HTTP/2 HPACK integer overflow and buffer allocation
eclipse · jetty.project
High7.5 - CVE-2023-3592
In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types.
Eclipse · Mosquitto
Medium5.8 - CVE-2023-0809
In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.
Eclipse · Mosquitto
Medium5.8 - CVE-2023-41900
Jetty's OpenId Revoked authentication allows one request
eclipse · jetty.project
Low3.5 - CVE-2023-40167
Jetty accepts "+" prefixed value in Content-Length
eclipse · jetty.project
Medium5.3 - CVE-2023-36479
Jetty vulnerable to errant command quoting in CGI Servlet
eclipse · jetty.project
Low3.5 - CVE-2023-26049
Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty
eclipse · jetty.project
Low2.4