Eclipse
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 398 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 31, 2009 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not own
Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged mode
NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full
Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation
iofogctl command injection via Controller provisioning response
Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials
JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing
JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization
JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity()
jdmpview / DTFJ reads arbitrary local files and makes arbitrary outbound requests when opening a third-party diagnostic dump bundle (XXE in XMLIndexReader)
Monitor Eclipse in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.