Eclipse Vulnerabilità

Sequenza temporale

Genere

Prodotto

Eclipse Jetty29
Eclipse Mosquitto18
Eclipse OpenJ911
Eclipse Theia7
Eclipse Vert.x6

Contromisure

Official Fix63
Temporary Fix0
Workaround0
Unavailable0
Not Defined72

Sfruttabilità

High0
Functional0
Proof-of-Concept1
Unproven0
Not Defined134

Accesso al vettore

Not Defined0
Physical1
Local8
Adjacent24
Network102

Autenticazione

Not Defined0
High4
Low53
None78

Interazione dell'utente

Not Defined0
Required23
None112

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤415
≤512
≤637
≤740
≤820
≤99
≤102

CVSSv3 Temp

≤10
≤20
≤30
≤416
≤512
≤639
≤738
≤819
≤910
≤101

VulDB

≤10
≤20
≤30
≤427
≤521
≤648
≤715
≤822
≤91
≤101

NVD

≤10
≤20
≤30
≤41
≤52
≤612
≤712
≤831
≤911
≤1020

CNA

≤10
≤20
≤33
≤42
≤52
≤64
≤76
≤88
≤91
≤100

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k26
<2k85
<5k24
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k131
<2k4
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (42): BIRT (2), Buildship (1), Californium (3), Che (3), CycloneDDS (2), Cyclone DDS (2), Equinox (1), Equinox p2 (1), GlassFish (1), Glassfish (1), Hawkbit (1), Hono (2), IDE (4), JGit (1), Jetty (29), Jetty Server (1), Keti (2), Kura (4), Leshan (1), Lyo (1), Memory Analyzer (3), Mojarra (3), Mosquito (1), Mosquitto (18), OMR (2), OpenJ9 (11), Openj9 (5), Paho MQTT C Client (1), Parsson (1), RAP (1), RDF4j (1), Sphinx (1), Theia (7), ThreadX (3), TinyDTLS (1), Vert.0 (6), Vorto (1), Wakaama (2), Web Tools Platform (1), birt (1), hawkBit (1), tinydtls (1)

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConEPSSCTICVE
09/04/20246.46.4Eclipse Kura LogServlet rivelazione di un 'informazioneSconosciutoNot DefinedNot Defined0.000430.00CVE-2024-3046
26/03/20246.36.2Eclipse ThreadX tx_freertos.c xQueueCreateSet buffer overflowSconosciutoNot DefinedOfficial Fix0.000430.00CVE-2024-2212
26/03/20246.36.2Eclipse ThreadX __portable_aligned_alloc buffer overflowSconosciutoNot DefinedOfficial Fix0.000430.02CVE-2024-2452
26/03/20246.05.9Eclipse ThreadX tx_clib_lock.c _Mtxinit buffer overflowSconosciutoNot DefinedOfficial Fix0.000430.02CVE-2024-2214
26/02/20246.46.3Eclipse Jetty HTTP/2 SSL denial of serviceSconosciutoNot DefinedOfficial Fix0.000450.03CVE-2024-22201
11/12/20234.74.7Eclipse Memory Analyzer Report Definition XML External EntitySconosciutoNot DefinedNot Defined0.000470.00CVE-2023-6194
15/11/20234.74.6Eclipse OpenJ9 JVM denial of serviceSconosciutoNot DefinedOfficial Fix0.000440.00CVE-2023-5676
09/11/20235.75.5Eclipse IDE XML External EntitySconosciutoNot DefinedOfficial Fix0.000460.03CVE-2023-4218
03/11/20235.75.7Eclipse Parsson JSON Parser denial of serviceSconosciutoNot DefinedOfficial Fix0.000440.03CVE-2023-4043
03/11/20237.87.7Eclipse Glassfish JDK escalazione di privilegiApplication Server SoftwareNot DefinedOfficial Fix0.001220.04CVE-2023-5763
18/10/20237.57.3Eclipse Mosquito Server denial of serviceSconosciutoNot DefinedOfficial Fix0.000440.04CVE-2023-5632
10/10/20236.46.3Eclipse Jetty MetaDataBuilder.java MetaDataBuilder.checkSize buffer overflowSconosciutoNot DefinedOfficial Fix0.002490.04CVE-2023-36478
21/09/20237.97.8Eclipse RAP FileUpload directory traversalSconosciutoNot DefinedOfficial Fix0.002630.00CVE-2023-4760
15/09/20233.63.6Eclipse Jetty OpenId autenticazione deboleSconosciutoNot DefinedOfficial Fix0.000680.04CVE-2023-41900
14/09/20233.63.6Eclipse Jetty CGI Servlet vulnerabilità sconosciutaSconosciutoNot DefinedOfficial Fix0.000550.04CVE-2023-36479
14/09/20235.35.2Eclipse Jetty vulnerabilità sconosciutaSconosciutoNot DefinedOfficial Fix0.000600.02CVE-2023-40167
12/09/20238.07.9Eclipse JGit Remote Code ExecutionSconosciutoNot DefinedOfficial Fix0.001280.03CVE-2023-4759
01/09/20235.95.8Eclipse Mosquitto QoS 2 Message denial of serviceSconosciutoNot DefinedOfficial Fix0.000980.00CVE-2023-28366
01/09/20237.37.2Eclipse Leshan DefaultDDFFileValidator XML External EntitySconosciutoNot DefinedOfficial Fix0.000630.03CVE-2023-41034
22/05/20236.96.8Eclipse Openj9 String buffer overflowSconosciutoNot DefinedOfficial Fix0.000870.00CVE-2023-2597
19/04/20234.03.9Eclipse Jetty Cookie Parser Privilege EscalationSconosciutoNot DefinedOfficial Fix0.001180.02CVE-2023-26049
19/04/20235.35.2Eclipse Jetty Multipart Request HttpServletRequest denial of serviceSconosciutoNot DefinedOfficial Fix0.001840.02CVE-2023-26048
15/03/20234.34.1Eclipse BIRT rivelazione di un 'informazioneSconosciutoNot DefinedOfficial Fix0.000610.02CVE-2023-0100
27/01/20236.16.1Eclipse GlassFish directory traversalApplication Server SoftwareNot DefinedNot Defined0.002060.02CVE-2022-2712
24/10/20226.05.9Eclipse Openj9 escalazione di privilegiSconosciutoNot DefinedOfficial Fix0.000930.00CVE-2022-3676

110 non vengono visualizzate più voci

Do you want to use VulDB in your project?

Use the official API to access entries easily!