Eclipse 漏洞

时间轴

类型

产品

Eclipse Jetty29
Eclipse Mosquitto18
Eclipse OpenJ911
Eclipse Theia7
Eclipse Vert.x6

修正

Official Fix63
Temporary Fix0
Workaround0
Unavailable0
Not Defined72

易受攻击性

High0
Functional0
Proof-of-Concept1
Unproven0
Not Defined134

访问向量

Not Defined0
Physical1
Local8
Adjacent24
Network102

身份验证

Not Defined0
High4
Low53
None78

用户交互

Not Defined0
Required23
None112

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤415
≤512
≤637
≤740
≤820
≤99
≤102

CVSSv3 Temp

≤10
≤20
≤30
≤416
≤512
≤639
≤738
≤819
≤910
≤101

VulDB

≤10
≤20
≤30
≤427
≤521
≤648
≤715
≤822
≤91
≤101

NVD

≤10
≤20
≤30
≤41
≤52
≤612
≤712
≤831
≤911
≤1020

CNA

≤10
≤20
≤33
≤42
≤52
≤64
≤76
≤88
≤91
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k26
<2k85
<5k24
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k130
<2k5
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (42): BIRT (2), Buildship (1), Californium (3), Che (3), CycloneDDS (2), Cyclone DDS (2), Equinox (1), Equinox p2 (1), GlassFish (1), Glassfish (1), Hawkbit (1), Hono (2), IDE (4), JGit (1), Jetty (29), Jetty Server (1), Keti (2), Kura (4), Leshan (1), Lyo (1), Memory Analyzer (3), Mojarra (3), Mosquito (1), Mosquitto (18), OMR (2), OpenJ9 (11), Openj9 (5), Paho MQTT C Client (1), Parsson (1), RAP (1), RDF4j (1), Sphinx (1), Theia (7), ThreadX (3), TinyDTLS (1), Vert.0 (6), Vorto (1), Wakaama (2), Web Tools Platform (1), birt (1), hawkBit (1), tinydtls (1)

已发布BaseTemp漏洞Prod修正EPSSCTICVE
2024-04-096.46.4Eclipse Kura LogServlet 信息公开未知Not DefinedNot Defined0.000430.00CVE-2024-3046
2024-03-266.36.2Eclipse ThreadX tx_freertos.c xQueueCreateSet 内存损坏未知Not DefinedOfficial Fix0.000430.00CVE-2024-2212
2024-03-266.36.2Eclipse ThreadX __portable_aligned_alloc 内存损坏未知Not DefinedOfficial Fix0.000430.02CVE-2024-2452
2024-03-266.05.9Eclipse ThreadX tx_clib_lock.c _Mtxinit 内存损坏未知Not DefinedOfficial Fix0.000430.02CVE-2024-2214
2024-02-266.46.3Eclipse Jetty HTTP/2 SSL 拒绝服务未知Not DefinedOfficial Fix0.000450.03CVE-2024-22201
2023-12-114.74.7Eclipse Memory Analyzer Report Definition XML External Entity未知Not DefinedNot Defined0.000470.00CVE-2023-6194
2023-11-154.74.6Eclipse OpenJ9 JVM 拒绝服务未知Not DefinedOfficial Fix0.000440.00CVE-2023-5676
2023-11-095.75.5Eclipse IDE XML External Entity未知Not DefinedOfficial Fix0.000460.03CVE-2023-4218
2023-11-035.75.7Eclipse Parsson JSON Parser 拒绝服务未知Not DefinedOfficial Fix0.000440.03CVE-2023-4043
2023-11-037.87.7Eclipse Glassfish JDK 权限升级Application Server SoftwareNot DefinedOfficial Fix0.001220.04CVE-2023-5763
2023-10-187.57.3Eclipse Mosquito Server 拒绝服务未知Not DefinedOfficial Fix0.000440.00CVE-2023-5632
2023-10-106.46.3Eclipse Jetty MetaDataBuilder.java MetaDataBuilder.checkSize 内存损坏未知Not DefinedOfficial Fix0.002490.04CVE-2023-36478
2023-09-217.97.8Eclipse RAP FileUpload 目录遍历未知Not DefinedOfficial Fix0.002630.00CVE-2023-4760
2023-09-153.63.6Eclipse Jetty OpenId 弱身份验证未知Not DefinedOfficial Fix0.000680.04CVE-2023-41900
2023-09-143.63.6Eclipse Jetty CGI Servlet 未知漏洞未知Not DefinedOfficial Fix0.000550.02CVE-2023-36479
2023-09-145.35.2Eclipse Jetty 未知漏洞未知Not DefinedOfficial Fix0.000600.02CVE-2023-40167
2023-09-128.07.9Eclipse JGit Remote Code Execution未知Not DefinedOfficial Fix0.001280.03CVE-2023-4759
2023-09-015.95.8Eclipse Mosquitto QoS 2 Message 拒绝服务未知Not DefinedOfficial Fix0.000980.00CVE-2023-28366
2023-09-017.37.2Eclipse Leshan DefaultDDFFileValidator XML External Entity未知Not DefinedOfficial Fix0.000630.03CVE-2023-41034
2023-05-226.96.8Eclipse Openj9 String 内存损坏未知Not DefinedOfficial Fix0.000870.00CVE-2023-2597
2023-04-194.03.9Eclipse Jetty Cookie Parser Privilege Escalation未知Not DefinedOfficial Fix0.001180.02CVE-2023-26049
2023-04-195.35.2Eclipse Jetty Multipart Request HttpServletRequest 拒绝服务未知Not DefinedOfficial Fix0.001840.02CVE-2023-26048
2023-03-154.34.1Eclipse BIRT 信息公开未知Not DefinedOfficial Fix0.000610.02CVE-2023-0100
2023-01-276.16.1Eclipse GlassFish 目录遍历Application Server SoftwareNot DefinedNot Defined0.002060.02CVE-2022-2712
2022-10-246.05.9Eclipse Openj9 权限升级未知Not DefinedOfficial Fix0.000930.00CVE-2022-3676

110 更多条目未显示

Do you need the next level of professionalism?

Upgrade your account now!