MA
Product
Memory Analyzer
3
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 0
Watch
Add Memory Analyzer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-17634 | 9.0 | Jan 17 | Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS) vulnerability when generating an HTML report from a malicious heap dump Affected: through 1.9.1 |
| CVE-2019-17635 | 7.8 | Jan 17 | Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability if an index file of a parsed heap dump is replaced by a malicious version and the… Affected: through 1.9.1 |
| CVE-2023-6194 | 7.1 | Dec 11 | In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit document type definition (DTD) references to external entities Affected: 0.7 through 1.14.0 |
Showing 3
