Skip to content

Vendor

org.eclipse.milo vulnerabilities

2 published CVES affecting org.eclipse.milo, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of org.eclipse.milo alerts

Products

Latest org.eclipse.milo CVEs

Newest publication first

  1. CVE-2022-25897 Denial of Service (DoS)

    Published
    HighCVSS 7.5 EPSS 1.3%

    The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.

  2. CVE-2019-19135 Insufficient Nonce Validation in Eclipse Milo Client

    Published
    HighCVSS 7.4 EPSS 1.0%

    In OPC Foundation OPC UA .NET Standard codebase 1.4.357.28, servers do not create sufficiently random numbers in OPCFoundation.NetStandard.Opc.Ua before 1.4.359.31, which allows man in the middle attackers to reuse encrypted user credentials sent over the network.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.