eclipse vorto vulnerabilities

Latest eclipse vorto CVEs

Newest publication first

1. CVE-2019-10248 Eclipse Vorto resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS

   Published 2019-04-22

   High·CVSS 8.1 EPSS 0.43%

   Eclipse Vorto versions prior to 0.11 resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of Vorto might be infected.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.