[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSg_ppv5fNGx_mCML6EuSfwi5sKuEdculbfOL2mcH66o":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":311,"kevVulnerabilities":371,"topProductsByCves":376,"seoMetadata":387,"meta":396},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":310},8948,"eclipse",65,203,1,2511,"2025-10-20","e",[16,22,29,35,40,46,51,57,62,67,71,76,81,86,91,96,101,106,111,117,121,126,130,134,138,142,146,149,153,157,162,167,172,176,180,184,189,194,198,202,206,210,214,219,224,229,233,237,240,244,248,251,255,260,265,270,275,280,284,288,292,297,300,304,307],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},40521,"jetty",358,39,"2024-10-14",{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":27,"last_cve_update":28},40531,"mosquitto",124,26,0,"2024-10-30",{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":27,"last_cve_update":34},40533,"openj9",52,20,"2025-05-09",{"id":36,"product_name":37,"version_count":38,"cve_count":39,"kev_count":27,"last_cve_update":13},40549,"threadx_netx_duo",24,8,{"id":41,"product_name":42,"version_count":43,"cve_count":44,"kev_count":27,"last_cve_update":45},40547,"theia",66,7,"2021-11-10",{"id":47,"product_name":48,"version_count":49,"cve_count":44,"kev_count":27,"last_cve_update":50},40552,"vert.x",62,"2024-09-04",{"id":52,"product_name":53,"version_count":54,"cve_count":55,"kev_count":27,"last_cve_update":56},40524,"kura",38,5,"2024-04-09",{"id":58,"product_name":59,"version_count":60,"cve_count":55,"kev_count":27,"last_cve_update":61},40550,"threadx_usbx",23,"2025-10-17",{"id":63,"product_name":64,"version_count":65,"cve_count":65,"kev_count":27,"last_cve_update":66},40532,"omr",4,"2025-02-21",{"id":68,"product_name":69,"version_count":33,"cve_count":65,"kev_count":27,"last_cve_update":70},40548,"threadx","2025-10-15",{"id":72,"product_name":73,"version_count":74,"cve_count":65,"kev_count":27,"last_cve_update":75},40513,"glassfish",21,"2024-09-30",{"id":77,"product_name":78,"version_count":79,"cve_count":65,"kev_count":27,"last_cve_update":80},40501,"californium",40,"2022-11-10",{"id":82,"product_name":83,"version_count":84,"cve_count":65,"kev_count":27,"last_cve_update":85},40502,"che",129,"2021-09-29",{"id":87,"product_name":88,"version_count":26,"cve_count":89,"kev_count":27,"last_cve_update":90},40528,"memory_analyzer",3,"2023-12-11",{"id":92,"product_name":93,"version_count":94,"cve_count":89,"kev_count":27,"last_cve_update":95},40530,"mojarra",156,"2021-06-02",{"id":97,"product_name":98,"version_count":99,"cve_count":89,"kev_count":27,"last_cve_update":100},40508,"eclipse_ide",46,"2023-11-09",{"id":102,"product_name":103,"version_count":104,"cve_count":89,"kev_count":27,"last_cve_update":105},40522,"jgit",392,"2025-05-21",{"id":107,"product_name":108,"version_count":109,"cve_count":89,"kev_count":27,"last_cve_update":110},40500,"business_intelligence_and_reporting_tools",49,"2023-03-15",{"id":112,"product_name":113,"version_count":114,"cve_count":115,"kev_count":27,"last_cve_update":116},40542,"rdf4j",36,2,"2018-12-19",{"id":118,"product_name":119,"version_count":38,"cve_count":115,"kev_count":27,"last_cve_update":120},40507,"eclipse_dataspace_components","2024-09-27",{"id":122,"product_name":123,"version_count":124,"cve_count":115,"kev_count":27,"last_cve_update":125},40539,"parsson",12,"2024-07-17",{"id":127,"product_name":128,"version_count":11,"cve_count":115,"kev_count":27,"last_cve_update":129},40557,"wakaama","2022-02-01",{"id":131,"product_name":132,"version_count":89,"cve_count":115,"kev_count":27,"last_cve_update":133},40551,"tinydtls","2021-07-08",{"id":135,"product_name":136,"version_count":74,"cve_count":115,"kev_count":27,"last_cve_update":137},40515,"hono","2021-01-14",{"id":139,"product_name":140,"version_count":27,"cve_count":115,"kev_count":27,"last_cve_update":141},40559,"wild_web_developer","2019-10-23",{"id":143,"product_name":144,"version_count":11,"cve_count":115,"kev_count":27,"last_cve_update":145},40523,"keti","2021-09-09",{"id":147,"product_name":148,"version_count":44,"cve_count":115,"kev_count":27,"last_cve_update":137},40514,"hawkbit",{"id":150,"product_name":151,"version_count":27,"cve_count":115,"kev_count":27,"last_cve_update":152},40525,"lemminx","2022-02-18",{"id":154,"product_name":155,"version_count":27,"cve_count":115,"kev_count":27,"last_cve_update":156},40504,"cyclonedds","2022-05-05",{"id":158,"product_name":159,"version_count":160,"cve_count":115,"kev_count":27,"last_cve_update":161},40503,"cyclone_data_distribution_service",14,"2021-08-23",{"id":163,"product_name":164,"version_count":165,"cve_count":115,"kev_count":27,"last_cve_update":166},40555,"vert.x-web",111,"2023-02-09",{"id":168,"product_name":169,"version_count":170,"cve_count":11,"kev_count":27,"last_cve_update":171},40562,"xtext",43,"2019-05-06",{"id":173,"product_name":174,"version_count":20,"cve_count":11,"kev_count":27,"last_cve_update":175},40499,"buildship","2019-06-14",{"id":177,"product_name":178,"version_count":179,"cve_count":11,"kev_count":27,"last_cve_update":80},40505,"deeplearning4j",29,{"id":181,"product_name":182,"version_count":26,"cve_count":11,"kev_count":27,"last_cve_update":183},40506,"ditto","2024-05-23",{"id":185,"product_name":186,"version_count":187,"cve_count":11,"kev_count":27,"last_cve_update":188},40509,"edc_connector",27,"2024-05-07",{"id":190,"product_name":191,"version_count":192,"cve_count":11,"kev_count":27,"last_cve_update":193},40510,"egit",64,"2020-02-12",{"id":195,"product_name":196,"version_count":11,"cve_count":11,"kev_count":27,"last_cve_update":197},40511,"equinox","2021-09-13",{"id":199,"product_name":200,"version_count":27,"cve_count":11,"kev_count":27,"last_cve_update":201},40512,"equinox_p2","2022-07-08",{"id":203,"product_name":204,"version_count":11,"cve_count":11,"kev_count":27,"last_cve_update":205},40516,"hudson","2022-07-18",{"id":207,"product_name":208,"version_count":11,"cve_count":11,"kev_count":27,"last_cve_update":209},40517,"ide","2018-04-20",{"id":211,"product_name":212,"version_count":65,"cve_count":11,"kev_count":27,"last_cve_update":213},40518,"jakarta_expression_language","2021-05-26",{"id":215,"product_name":216,"version_count":217,"cve_count":11,"kev_count":27,"last_cve_update":218},40519,"jakarta_mail",13,"2025-07-21",{"id":220,"product_name":221,"version_count":222,"cve_count":11,"kev_count":27,"last_cve_update":223},40520,"jersey",57,"2021-04-22",{"id":225,"product_name":226,"version_count":227,"cve_count":11,"kev_count":27,"last_cve_update":228},40526,"leshan",15,"2023-08-31",{"id":230,"product_name":231,"version_count":115,"cve_count":11,"kev_count":27,"last_cve_update":232},40527,"lyo","2022-07-07",{"id":234,"product_name":235,"version_count":11,"cve_count":11,"kev_count":27,"last_cve_update":236},40529,"milo","2022-09-08",{"id":238,"product_name":239,"version_count":60,"cve_count":11,"kev_count":27,"last_cve_update":100},40535,"org.eclipse.core.runtime",{"id":241,"product_name":242,"version_count":11,"cve_count":11,"kev_count":27,"last_cve_update":243},40536,"paho_java_client","2019-09-11",{"id":245,"product_name":246,"version_count":115,"cve_count":11,"kev_count":27,"last_cve_update":247},40538,"paho_mqtt_c\\\u002Fc\\+\\+_client","2021-11-03",{"id":249,"product_name":250,"version_count":27,"cve_count":11,"kev_count":27,"last_cve_update":100},40540,"pde",{"id":252,"product_name":253,"version_count":27,"cve_count":11,"kev_count":27,"last_cve_update":254},40541,"platform","2021-03-09",{"id":256,"product_name":257,"version_count":258,"cve_count":11,"kev_count":27,"last_cve_update":259},40543,"remote_application_platform",34,"2023-09-21",{"id":261,"product_name":262,"version_count":263,"cve_count":11,"kev_count":27,"last_cve_update":264},40544,"sphinx",11,"2022-08-16",{"id":266,"product_name":267,"version_count":268,"cve_count":11,"kev_count":27,"last_cve_update":269},40545,"target_management",35,"2024-04-26",{"id":271,"product_name":272,"version_count":273,"cve_count":11,"kev_count":27,"last_cve_update":274},40554,"vert.x_stomp",80,"2023-05-12",{"id":276,"product_name":277,"version_count":278,"cve_count":11,"kev_count":27,"last_cve_update":279},40556,"vorto",17,"2019-04-22",{"id":281,"product_name":282,"version_count":65,"cve_count":11,"kev_count":27,"last_cve_update":283},40558,"web_tools_platform","2020-07-15",{"id":285,"product_name":286,"version_count":287,"cve_count":11,"kev_count":27,"last_cve_update":171},40560,"xtend",10,{"id":289,"product_name":290,"version_count":287,"cve_count":11,"kev_count":27,"last_cve_update":291},40498,"birt","2009-12-31",{"id":293,"product_name":294,"version_count":295,"cve_count":27,"kev_count":27,"last_cve_update":296},40553,"vert.x_grpc",30,null,{"id":298,"product_name":299,"version_count":44,"cve_count":27,"kev_count":27,"last_cve_update":296},40561,"xtest",{"id":301,"product_name":302,"version_count":303,"cve_count":27,"kev_count":27,"last_cve_update":296},40546,"temurin",45,{"id":305,"product_name":306,"version_count":115,"cve_count":27,"kev_count":27,"last_cve_update":296},40534,"open_vsx",{"id":308,"product_name":309,"version_count":278,"cve_count":27,"kev_count":27,"last_cve_update":296},40537,"paho_mqtt","Eclipse is a technology vendor with 65 tracked products and 203 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[312,320,328,333,338,344,350,356,362,367],{"cveId":313,"description":314,"publishedDate":315,"cvssScore":316,"cvssVersion":317,"severity":318,"isKev":4,"epssScore":319},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10",7.5,"v3.1","High",0.99999,{"cveId":321,"description":322,"publishedDate":323,"cvssScore":324,"cvssVersion":317,"severity":325,"isKev":326,"epssScore":327},"CVE-2021-34429","For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and\u002For bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164\u002FGHSA-v7ff-8wcx-gmc5.","2021-07-15",5.3,"Medium",false,0.99298,{"cveId":329,"description":330,"publishedDate":331,"cvssScore":324,"cvssVersion":317,"severity":325,"isKev":326,"epssScore":332},"CVE-2021-28164","In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to \u002Fcontext\u002F%2e\u002FWEB-INF\u002Fweb.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.","2021-04-01",0.82371,{"cveId":334,"description":335,"publishedDate":336,"cvssScore":324,"cvssVersion":317,"severity":325,"isKev":326,"epssScore":337},"CVE-2021-28169","For Eclipse Jetty versions \u003C= 9.4.40, \u003C= 10.0.2, \u003C= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `\u002Fconcat?\u002F%2557EB-INF\u002Fweb.xml` can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.","2021-06-09",0.7848,{"cveId":339,"description":340,"publishedDate":341,"cvssScore":342,"cvssVersion":317,"severity":325,"isKev":326,"epssScore":343},"CVE-2020-27223","In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due to high CPU usage processing those quality values, resulting in minutes of CPU time exhausted processing those quality values.","2021-02-26",5.2,0.78031,{"cveId":345,"description":346,"publishedDate":193,"cvssScore":347,"cvssVersion":317,"severity":348,"isKev":326,"epssScore":349},"CVE-2014-9390","Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before 08-12-2014; and JGit all versions before 08-12-2014 allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git\u002Fconfig file with (1) an ignorable Unicode codepoint, (2) a git~1\u002Fconfig representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem.",9.8,"Critical",0.75597,{"cveId":351,"description":352,"publishedDate":353,"cvssScore":316,"cvssVersion":354,"severity":318,"isKev":326,"epssScore":355},"CVE-2015-2080","The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.","2016-10-07","v3.0",0.75441,{"cveId":357,"description":358,"publishedDate":28,"cvssScore":359,"cvssVersion":360,"severity":318,"isKev":326,"epssScore":361},"CVE-2024-10525","In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its on_subscribe callback. This affects the mosquitto_sub and mosquitto_rr clients.",7.2,"v4.0",0.59222,{"cveId":363,"description":364,"publishedDate":365,"cvssScore":347,"cvssVersion":317,"severity":348,"isKev":326,"epssScore":366},"CVE-2021-34427","In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running instance.","2021-06-25",0.57982,{"cveId":368,"description":369,"publishedDate":331,"cvssScore":316,"cvssVersion":317,"severity":318,"isKev":326,"epssScore":370},"CVE-2021-28165","In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.",0.53861,[372],{"cveId":313,"description":314,"publishedDate":315,"cvssScore":316,"cvssVersion":317,"severity":318,"isKev":4,"epssScore":319,"cisaVulnName":373,"cisaDateAdded":315,"cisaShortDescription":374,"cisaRequiredAction":375},"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",[377,378,379,380,381,382,383,384,385,386],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":27,"last_cve_update":28},{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":27,"last_cve_update":34},{"id":36,"product_name":37,"version_count":38,"cve_count":39,"kev_count":27,"last_cve_update":13},{"id":41,"product_name":42,"version_count":43,"cve_count":44,"kev_count":27,"last_cve_update":45},{"id":47,"product_name":48,"version_count":49,"cve_count":44,"kev_count":27,"last_cve_update":50},{"id":52,"product_name":53,"version_count":54,"cve_count":55,"kev_count":27,"last_cve_update":56},{"id":58,"product_name":59,"version_count":60,"cve_count":55,"kev_count":27,"last_cve_update":61},{"id":63,"product_name":64,"version_count":65,"cve_count":65,"kev_count":27,"last_cve_update":66},{"id":68,"product_name":69,"version_count":33,"cve_count":65,"kev_count":27,"last_cve_update":70},{"title":388,"metaDescription":389,"keywords":390,"structuredData":391},"Eclipse - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Eclipse covering 65 products with 203 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Eclipse vulnerabilities, Eclipse security, Eclipse CVE, Eclipse threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Eclipse KEV, Eclipse exploited vulnerabilities",{"@context":392,"@type":393,"name":394,"description":389,"url":395},"https:\u002F\u002Fschema.org","Organization","Eclipse","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Feclipse",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":397,"apiVersion":398},"2026-10-17T15:26:25.582Z","3.0"]