Vendor
The Eclipse Foundation
100 known vulnerabilities in products by The Eclipse Foundation, 0 of them actively exploited (CISA KEV).
Key figures
100
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
19
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-34427 | The Eclipse Foundation Eclipse BIRT: Improper Input Validation | 9.8 | |
| Critical | CVE-2017-7658 | The Eclipse Foundation Eclipse Jetty: HTTP Request/Response Smuggling | 9.8 | |
| Critical | CVE-2017-7657 | The Eclipse Foundation Eclipse Jetty: HTTP Request/Response Smuggling | 9.8 | |
| Critical | CVE-2019-17638 | The Eclipse Foundation Eclipse Jetty: Operation on a Resource after Expiration or Release | 9.4 | |
| High | CVE-2021-28165 | The Eclipse Foundation Eclipse Jetty: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | 7.5 | |
| High | CVE-2018-12543 | The Eclipse Foundation Eclipse Mosquitto: Reachable Assertion | 7.5 | |
| Critical | CVE-2018-12547 | The Eclipse Foundation Eclipse OpenJ9: Improper Input Validation | 9.8 | |
| High | CVE-2017-7656 | The Eclipse Foundation Eclipse Jetty: HTTP Request/Response Smuggling | 7.5 | |
| Medium | CVE-2021-34429 | The Eclipse Foundation Eclipse Jetty: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | 5.3 | |
| Critical | CVE-2020-27224 | The Eclipse Foundation Eclipse Theia: Cross-site Scripting | 9.6 | |
| Medium | CVE-2021-28164 | The Eclipse Foundation Eclipse Jetty: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | 5.3 | |
| Medium | CVE-2021-28169 | The Eclipse Foundation Eclipse Jetty: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| High | CVE-2018-12545 | The Eclipse Foundation Eclipse Jetty: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2017-7651 | The Eclipse Foundation Eclipse Mosquitto: Memory Allocation with Excessive Size Value | 7.5 | |
| Medium | CVE-2020-27223 | The Eclipse Foundation Eclipse Jetty: Inefficient Algorithmic Complexity | 5.2 | |
| Critical | CVE-2018-12549 | The Eclipse Foundation Eclipse OpenJ9: Direct Use of Unsafe JNI | 9.8 | |
| Critical | CVE-2018-12542 | The Eclipse Foundation Eclipse Vert.x: security vulnerability | 9.8 | |
| Critical | CVE-2021-34436 | The Eclipse Foundation Eclipse Theia: Improper Restriction of XML External Entity Reference | 9.8 | |
| Medium | CVE-2019-10241 | The Eclipse Foundation Eclipse Jetty: Cross-site Scripting | 6.1 | |
| Critical | CVE-2018-12544 | The Eclipse Foundation Eclipse Vert.x: Improper Restriction of XML External Entity Reference | 9.8 | |
| High | CVE-2018-12538 | The Eclipse Foundation Eclipse Jetty: J2EE Misconfiguration: Insufficient Session-ID Length | 8.8 | |
| Critical | CVE-2019-11772 | The Eclipse Foundation Eclipse OpenJ9: Out-of-bounds Write | 9.8 | |
| High | CVE-2020-27216 | The Eclipse Foundation Eclipse Jetty: Creation of Temporary File With Insecure Permissions | 7.0 | |
| Critical | CVE-2019-17640 | The Eclipse Foundation Eclipse Vert.x: Relative Path Traversal | 9.8 | |
| Critical | CVE-2021-41035 | The Eclipse Foundation Eclipse OMR: Execution with Unnecessary Privileges | 9.8 |
Products
| Eclipse Jetty | 23 | 0 |
| Eclipse Mosquitto | 16 | 0 |
| Eclipse Openj9 | 14 | 0 |
| Eclipse Theia | 6 | 0 |
| Eclipse Vert.x | 6 | 0 |
| Eclipse Californium | 3 | 0 |
| Eclipse Kura | 3 | 0 |
| Eclipse Omr | 3 | 0 |