EO
Product
Eclipse OpenJ9
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 1Medium 1Low 0
Watch
Add Eclipse OpenJ9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-12547 | 9.8 | Feb 11 | In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter Affected: before 0.12.0 |
| CVE-2018-12549 | 9.8 | Feb 11 | In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it Affected: 0.11.0 |
| CVE-2018-12548 | 9.8 | Jan 31 | In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which accept pointer values that are… Affected: 0.11.0 |
| CVE-2018-12539 | 7.8 | Aug 14 | In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach… Affected: 0.8 |
| CVE-2022-3676 | 6.5 | Oct 24 | In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check Affected: before 0.35.0 |
Showing 5
