Browse all 101 CVE security advisories affecting The Eclipse Foundation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
The Eclipse Foundation operates as a non-profit organization managing open-source software projects, primarily serving developers through widely adopted frameworks like Eclipse IDE, Jakarta EE, and OSGi. Its core business involves stewarding these technologies, which are integral to enterprise Java development and IoT ecosystems. Historically, vulnerabilities within its ecosystem have frequently involved remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from complex plugin architectures or legacy codebases. While the Foundation itself does not develop all software, its projects have faced notable security incidents, including critical flaws in Eclipse IDE components that allowed unauthorized access or system compromise. With 101 CVEs currently on record, the organization emphasizes community-driven security reviews and transparent disclosure processes to mitigate risks. These efforts aim to maintain trust among millions of users who rely on its tools for mission-critical applications, ensuring that security patches are distributed promptly to address identified weaknesses in its extensive portfolio of open-source solutions.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2023-0100 | Eclipse BIRT 安全漏洞 — Eclipse BIRT (Business Intelligence Reporting Tool) CWE-20 | 9.1 | - | 2023-03-15 |
| CVE-2022-2712 | Eclipse GlassFish 路径遍历漏洞 — Eclipse GlassFish CWE-22 | 6.5 | Medium | 2023-01-27 |
| CVE-2022-3676 | Eclipse Openj9 安全漏洞 — Eclipse OpenJ9 CWE-20 | 8.2 | - | 2022-10-24 |
| CVE-2022-2838 | Eclipse Sphinx 代码问题漏洞 — Eclipse Sphinx CWE-611 | 7.5 | - | 2022-08-16 |
| CVE-2022-2576 | Eclipse Californium 安全漏洞 — Eclipse Californium CWE-408 | 7.5 | - | 2022-07-29 |
| CVE-2021-41037 | Eclipse Equinox 安全漏洞 — Eclipse Equinox p2 CWE-829 | 10.0 | Critical | 2022-07-08 |
| CVE-2021-41042 | Eclipse Lyo 代码问题漏洞 — Eclipse Lyo CWE-611 | 5.3 | - | 2022-07-07 |
| CVE-2022-2191 | Eclipse Jetty 安全漏洞 — Eclipse Jetty CWE-404 | 7.5 | High | 2022-07-07 |
| CVE-2022-2047 | Eclipse Jetty 输入验证错误漏洞 — Eclipse Jetty CWE-20 | 2.7 | Low | 2022-07-07 |
| CVE-2022-2048 | Eclipse Jetty 安全漏洞 — Eclipse Jetty CWE-410 | 7.5 | High | 2022-07-07 |
| CVE-2021-41041 | Eclipse OpenJ9 安全漏洞 — Eclipse OpenJ9 CWE-252 | 5.3 | - | 2022-04-27 |
| CVE-2021-41039 | Eclipse Mosquitto 安全漏洞 — Eclipse Mosquitto CWE-1050 | 7.5 | - | 2021-12-01 |
| CVE-2021-41038 | Eclipse Theia 安全漏洞 — @theia/plugin-ext CWE-940 | 6.1 | - | 2021-11-10 |
| CVE-2021-41036 | MQTT 缓冲区错误漏洞 — Eclipse Paho MQTT C Client CWE-787 | 9.8 | - | 2021-11-02 |
| CVE-2021-41035 | Eclipse Openj9 安全漏洞 — Eclipse OMR CWE-250 | 9.1 | - | 2021-10-25 |
| CVE-2021-41034 | Eclipse Che 安全漏洞 — Eclipse Che CWE-924 | 7.4 | - | 2021-09-29 |
| CVE-2021-41033 | Eclipse Equinox 安全漏洞 — Eclipse Equinox CWE-300 | 8.1 | - | 2021-09-13 |
| CVE-2021-34436 | Eclipse Theia 代码问题漏洞 — Eclipse Theia CWE-611 | 9.8 | - | 2021-09-02 |
| CVE-2021-34435 | Eclipse Theia 访问控制错误漏洞 — Eclipse Theia CWE-942 | 8.8 | - | 2021-09-01 |
| CVE-2021-34434 | Eclipse Mosquitto 授权问题漏洞 — Eclipse Mosquitto CWE-285 | 4.3 | - | 2021-08-30 |
| CVE-2021-34433 | Eclipse Californium 数据伪造问题漏洞 — Eclipse Californium CWE-322 | 7.5 | - | 2021-08-20 |
| CVE-2021-34432 | Eclipse Mosquitto 输入验证错误漏洞 — Eclipse Mosquitto CWE-20 | 7.5 | - | 2021-07-27 |
| CVE-2021-34431 | Eclipse Mosquitto 安全漏洞 — Eclipse Mosquitto CWE-401 | 6.5 | - | 2021-07-22 |
| CVE-2021-34429 | Eclipse Jetty 安全漏洞 — Eclipse Jetty CWE-200 | 5.3 | Medium | 2021-07-15 |
| CVE-2021-34430 | Eclipse TinyDTLS 加密问题漏洞 — Eclipse TinyDTLS CWE-338 | 9.1 | - | 2021-07-08 |
| CVE-2021-34427 | Eclipse BIRT 代码问题漏洞 — Eclipse BIRT CWE-20 | 9.8 | - | 2021-06-25 |
| CVE-2021-34428 | Eclipse Jetty 代码问题漏洞 — Eclipse Jetty CWE-613 | 2.9 | Low | 2021-06-22 |
| CVE-2021-28169 | Eclipse Jetty 安全漏洞 — Eclipse Jetty CWE-200 | 5.3 | Medium | 2021-06-09 |
| CVE-2021-28170 | Jakarta Expression Language 输入验证错误漏洞 — Jakarta Expression Language Implementation CWE-20 | 5.3 | - | 2021-05-26 |
| CVE-2021-28168 | Maxim Nesen jersey 安全漏洞 — Eclipse Jersey CWE-378 | 6.2 | Medium | 2021-04-22 |
This page lists every published CVE security advisory associated with The Eclipse Foundation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.