How many CVEs does Eclipse Foundation have?

Eclipse Foundation has 413 published CVE records since 2006, including 211 in the last two years.

How many Eclipse Foundation CVEs are in CISA KEV?

Yes — 1 of Eclipse Foundation's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which Eclipse Foundation products have the most CVEs?

The Eclipse Foundation products with the most published CVEs are Jetty, Eclipse Jetty, NetX Duo, jetty.project, Eclipse Vert.x.

What are the most common weakness types in Eclipse Foundation CVEs?

Eclipse Foundation's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-20 (Improper Input Validation).

How many critical Eclipse Foundation vulnerabilities are there?

Eclipse Foundation has 75 critical and 178 high-severity CVEs.

What is the average severity of Eclipse Foundation CVEs?

The average CVSS base score across Eclipse Foundation's scored CVEs is 7.4.

Eclipse Foundation Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Eclipse Foundation vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Overview

Eclipse Foundation has 413 published CVE records since 2006, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 134 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

Security scorecard

A quick read on Eclipse Foundation's vulnerability posture, as a share of its 413 published CVEs.

Average CVSS: 7.4
Critical / high: 61%
Actively exploited (KEV): 0%
Public exploit available: 32%
Patch available: 79%

Severity and exploitation

How the CVSS severity of Eclipse Foundation's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical75

High178

Medium147

Low13

In CISA’s Known Exploited Vulnerabilities catalog

One of Eclipse Foundation's CVEs is confirmed exploited in the wild.

Public exploits

134

134 of Eclipse Foundation's CVEs have a known public exploit available.

Most affected products

The Eclipse Foundation products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Eclipse Foundation CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Eclipse Foundation CVE records.

Disclosure activity by year

How many Eclipse Foundation CVEs were published each year.

2019

2020

2021

2022

2023

2024

2025

Latest Eclipse Foundation CVEs

The most recently disclosed vulnerabilities affecting Eclipse Foundation.

High vulnerability · 2026-10-15
CWE-494
High · CVSS 7.5
EPSS 0.1%2026-10-15
High vulnerability · 2026-10-15
CWE-290
High · CVSS 7.5
EPSS 0.3%2026-10-15
High vulnerability · 2026-10-15
CWE-269
High · CVSS 7.5
EPSS 0.2%2026-10-15
Medium vulnerability · 2026-10-15
CWE-348

Other vendors

CVE counts for other vendors.

QEMU434 CVEs cpanel432 CVEs EMC421 CVEs Splunk420 CVEs Progress406 CVEs Advantech404 CVEs Elastic396 CVEs nextcloud393 CVEs

Browse all vendors

Frequently asked questions

Common questions about Eclipse Foundation vulnerabilities.

How many CVEs does Eclipse Foundation have?: Eclipse Foundation has 413 published CVE records since 2006, including 211 in the last two years.
How many Eclipse Foundation CVEs are in CISA KEV?: Yes — 1 of Eclipse Foundation's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Which Eclipse Foundation products have the most CVEs?: The Eclipse Foundation products with the most published CVEs are Jetty, Eclipse Jetty, NetX Duo, jetty.project, Eclipse Vert.x.
What are the most common weakness types in Eclipse Foundation CVEs?: Eclipse Foundation's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-20 (Improper Input Validation).
Are there public exploits for Eclipse Foundation vulnerabilities?: Yes — 134 of Eclipse Foundation's CVEs have a known public exploit.
How many critical Eclipse Foundation vulnerabilities are there?: Eclipse Foundation has 75 critical and 178 high-severity CVEs.
What is the average severity of Eclipse Foundation CVEs?: The average CVSS base score across Eclipse Foundation's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Eclipse Foundation vulnerabilities

Get an alert for each new Eclipse Foundation CVE, with AI-written analysis and remediation steps.

Create an account See pricing