Login Request a demo
CA
Product
Californium
by Eclipse · last CVE Nov 10, 2022
4
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 4Medium 0Low 0
Severity
All severities4Critical0High4Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Californium to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-39368
8.2
1%
Nov 10
Eclipse Californium is a Java implementation of RFC7252 - Constrained Application Protocol for IoT Cloud services
Affected: before 2.7.4; 3.0.0 before 3.7.0
CVE-2022-2576
7.5
1%
Jul 29
In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parameter mismatch without using a…
Affected: 2.0.0 through 2.7.2; 3.0.0 through 3.5.0
CVE-2021-34433
7.5
0%
Aug 20
In Eclipse Californium version 2.0.0 to 2.6.4 and 3.0.0-M1 to 3.0.0-M3, the certificate based (x509 and RPK) DTLS handshakes accidentally succeeds without verifying the server…
Affected: 2.0.0 before 2.6.5; 3.0.0; 3.0.0; 3.0.0
CVE-2020-27222
7.5
1%
Feb 3
In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the DTLS server side sticks to a wrong internal…
Affected: 2.3.0 through 2.6.0
Showing 4