Skip to content

Product

debian/eclipse-wtp vulnerabilities

3 published CVES affecting debian/eclipse-wtp, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
1
Medium
1
Low
0
Unscored
1
CISA KEV
0

Latest debian/eclipse-wtp CVEs

Newest publication first

  2. CVE-2019-17637 In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server...

    Published
    HighCVSS 7.1 EPSS 0.88%

    In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server when edited or validated, even when external entity resolution is disabled in t...

  3. CVE-2019-10753 Incorrect Resource Transfer Between Spheres in eclipse-wtp

    Published
    MediumCVSS 5.9 EPSS 0.72%

    In all versions prior to version 3.9.6 for eclipse-wtp, all versions prior to version 9.4.4 for eclipse-cdt, and all versions prior to version 3.0.1 for eclipse-groovy, Spotless was resolving dependencies over an insecure channel (http). If the build occurred over an insecure con...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.