TE
Vendor
The Eclipse Foundation
6
CVEs
0
On KEV
0
New 30D
Products
EO9.8
Eclipse OpenJ9
The Eclipse Foundation
5 CVEs0 on KEV0 new
EV5.3
Eclipse Vert.x
The Eclipse Foundation
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-3676 | EO Eclipse OpenJ9 The Eclipse Foundation | 6.5 | Oct 24 | In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check |
| CVE-2018-12547 | EO Eclipse OpenJ9 The Eclipse Foundation | 9.8 | Feb 11 | In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter |
| CVE-2018-12549 | EO Eclipse OpenJ9 The Eclipse Foundation | 9.8 | Feb 11 | In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it |
| CVE-2018-12548 | EO Eclipse OpenJ9 The Eclipse Foundation | 9.8 | Jan 31 | In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which accept pointer values that are… |
| CVE-2018-12537 | EV Eclipse Vert.x The Eclipse Foundation | 5.3 | Aug 14 | In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value |
| CVE-2018-12539 | EO Eclipse OpenJ9 The Eclipse Foundation | 7.8 | Aug 14 | In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach… |