Eclipse Foundation
Number 60 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
310
Critical
33
High
142
Known Exploited
0
Exploit available
2
Network, no login needed
58.1%
Of 308 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 231 | 30 | 120 | 77 | 4 | 0 |
| 2025 | 47 | 2 | 12 | 27 | 6 | 0 |
| 2024 | 22 | 1 | 7 | 11 | 3 | 0 |
| 2023 | 8 | 0 | 3 | 4 | 1 | 0 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2018 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2017 | 2 | 0 | 0 | 0 | 0 | 2 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| Eclipse Vert.x | 23 | 19 |
| Eclipse ThreadX | 19 | 11 |
| Eclipse ThreadX NetX Duo | 19 | 12 |
| NetX Duo | 18 | 7 |
| Eclipse Jetty | 14 | 9 |
| ThreadX | 13 | 7 |
| Eclipse Theia | 12 | 10 |
| Eclipse Kura | 10 | 9 |
| Eclipse Glassfish | 9 | 3 |
| Eclipse KeyPont - GOSE | 9 | 1 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Memory Corruption | 79 | 44 |
| Denial of Service | 15 | 9 |
| Incorrect Authorization | 13 | 10 |
| Path Traversal | 13 | 12 |
| Server-Side Request Forgery | 13 | 9 |
| Cross-Site Scripting | 10 | 0 |
| Allocation of Resources Without Limits or Throttling | 7 | 4 |
| Information Disclosure | 7 | 6 |
| Buffer Over-read | 6 | 2 |
| Improper Input Validation | 6 | 0 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-97891 | Eclipse Foundation Eclipse Kura: Denial of Service | High | n/a | |
| CVE-2026-97402 | Eclipse Foundation Eclipse Kura vulnerability | Low | n/a | |
| CVE-2026-97401 | Eclipse Foundation Eclipse Kura: Privilege Escalation | High | n/a | |
| CVE-2026-114359 | Eclipse Foundation Eclipse Kura vulnerability | High | n/a | |
| CVE-2026-113422 | Eclipse Foundation Eclipse Kura: Incorrect Authorization | High | n/a | |
| CVE-2026-112191 | Eclipse Foundation Eclipse Kura: Privilege Escalation | High | n/a | |
| CVE-2026-112186 | Eclipse Foundation Eclipse Kura vulnerability | High | n/a | |
| CVE-2026-112185 | Eclipse Foundation Eclipse Kura: Incorrect Authorization | High | n/a | |
| CVE-2026-111729 | Eclipse Foundation Eclipse Kura: Path Traversal | High | n/a | |
| CVE-2026-124683 | Eclipse Foundation Eclipse Langium vulnerability | High | 0.5% |