How many Eclipse Foundation Eclipse OpenJ9 CVEs are in CISA KEV?

None of Eclipse Foundation Eclipse OpenJ9's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Eclipse Foundation Eclipse OpenJ9 are affected?

22 distinct Eclipse Foundation Eclipse OpenJ9 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Eclipse Foundation Eclipse OpenJ9 CVEs?

Eclipse Foundation Eclipse OpenJ9's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-843 (Access of Resource Using Incompatible Type ('Type Confusion')), CWE-121 (Stack-based Buffer Overflow), CWE-125 (Out-of-bounds Read).

How many critical Eclipse Foundation Eclipse OpenJ9 vulnerabilities are there?

Eclipse Foundation Eclipse OpenJ9 has 7 critical and 5 high-severity CVEs.

What is the average severity of Eclipse Foundation Eclipse OpenJ9 CVEs?

The average CVSS base score across Eclipse Foundation Eclipse OpenJ9's scored CVEs is 8.1.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Eclipse Foundation

16 CVEs

Eclipse Foundation Eclipse OpenJ9 Vulnerabilities

Name: Eclipse Foundation Eclipse OpenJ9 vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Eclipse OpenJ9 by Eclipse Foundation.

16

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

8.1

Avg CVSS

2018–2026

Last updated May 5, 2026

Overview

Eclipse Foundation Eclipse OpenJ9 has 16 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 8.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Eclipse Foundation Eclipse OpenJ9, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Eclipse Foundation Eclipse OpenJ9's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical7

High5

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Eclipse Foundation Eclipse OpenJ9's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of Eclipse Foundation Eclipse OpenJ9's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Eclipse Foundation Eclipse OpenJ9 version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.15.03 CVEs
>= 0.11.02 CVEs
< 0.12.01 CVE
< 0.14.01 CVE
< 0.32.01 CVE
< 0.35.01 CVE
<= 0.211 CVE
<= 0.231 CVE
<= 0.25.01 CVE
<= 0.37.01 CVE
>= 0.15 to 0.16 inclusive1 CVE
>= 0.81 CVE
0.21 <= v < 0.591 CVE

Fixed in

0.15.03 CVEs
> 0.231 CVE
> 0.25.01 CVE
> 0.37.01 CVE
0.12.01 CVE
0.14.01 CVE
0.32.01 CVE
0.35.01 CVE
0.591 CVE

Find a version

16 CVEs

Sort

High vulnerability · 2026-05-05
CVE-2026-6918
Public exploit
Patch
CWE-125
High · CVSS 8.7
EPSS 0.5% (41th pct)2026-05-05
Critical vulnerability · 2023-05-22
CVE-2023-2597
Patch
CWE-120
Critical · CVSS 9.1
EPSS 0.4% (34th pct)2023-05-22
Medium vulnerability · 2022-10-24
CVE-2022-3676
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.6% (44th pct)2022-10-24
Medium vulnerability · 2022-04-27
CVE-2021-41041
Patch
CWE-843
Medium · CVSS 5.3
EPSS 1.0% (59th pct)2022-04-27
Medium vulnerability · 2021-04-21
CVE-2021-28167
Public exploit
Patch
CWE-909
Medium · CVSS 6.5
EPSS 1.1% (62th pct)2021-04-21
Critical vulnerability · 2021-01-21
CVE-2020-27221
Patch
CWE-121
Critical · CVSS 9.8
EPSS 1.5% (72th pct)2021-01-21
Medium vulnerability · 2020-07-15
CVE-2019-17639
Patch
CWE-843
Medium · CVSS 5.3
EPSS 1.5% (71th pct)2020-07-15
Critical vulnerability · 2019-10-17
CVE-2019-17631
Patch
CWE-285
Critical · CVSS 9.1
EPSS 2.1% (79th pct)2019-10-17
High vulnerability · 2019-07-30
CVE-2019-11775
Patch
CWE-367
High · CVSS 7.4
EPSS 1.5% (71th pct)2019-07-30
Critical vulnerability · 2019-07-17
CVE-2019-11772
Patch
CWE-787
Critical · CVSS 9.8
EPSS 2.1% (80th pct)2019-07-17
High vulnerability · 2019-07-17
CVE-2019-11771
Patch
CWE-264
High · CVSS 7.8
EPSS 0.4% (32th pct)2019-07-17
High vulnerability · 2019-04-19
CVE-2019-10245
Patch
CWE-20
High · CVSS 7.5
EPSS 2.5% (83th pct)2019-04-19
Critical vulnerability · 2019-02-11
CVE-2018-12549
Patch
CWE-111
Critical · CVSS 9.8
EPSS 2.3% (82th pct)2019-02-11
Critical vulnerability · 2019-02-11
CVE-2018-12547
Patch
CWE-20
Critical · CVSS 9.8
EPSS 2.7% (85th pct)2019-02-11
Critical vulnerability · 2019-01-31
CVE-2018-12548CWE-822
Critical · CVSS 9.8
EPSS 1.1% (63th pct)2019-01-31
High vulnerability · 2018-08-14
CVE-2018-12539
Patch
CWE-419
High · CVSS 7.8
EPSS 0.5% (39th pct)2018-08-14

Common weakness types

The CWE weakness categories most often found in Eclipse Foundation Eclipse OpenJ9 CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Eclipse Foundation Eclipse OpenJ9 CVEs were published each year.

2018

1

2019

8

2020

1

2021

2

2022

2

2023

1

2026

1

Other Eclipse Foundation products

Browse vulnerabilities for other products by Eclipse Foundation.

jetty51 CVEs Eclipse Jetty31 CVEs jetty.project28 CVEs mosquitto26 CVEs openj921 CVEs threadx netx duo21 CVEs Eclipse Mosquitto16 CVEs threadx usbx15 CVEs

All Eclipse Foundation vulnerabilities

Frequently asked questions

Common questions about Eclipse Foundation Eclipse OpenJ9 vulnerabilities.

How many CVEs does Eclipse Foundation Eclipse OpenJ9 have?: Eclipse Foundation Eclipse OpenJ9 has 16 published CVE records since 2018.
How many Eclipse Foundation Eclipse OpenJ9 CVEs are in CISA KEV?: None of Eclipse Foundation Eclipse OpenJ9's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Eclipse Foundation Eclipse OpenJ9 vulnerabilities?: Yes — 2 of Eclipse Foundation Eclipse OpenJ9's CVEs have a known public exploit.
Which versions of Eclipse Foundation Eclipse OpenJ9 are affected?: 22 distinct Eclipse Foundation Eclipse OpenJ9 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Eclipse Foundation Eclipse OpenJ9 CVEs?: Eclipse Foundation Eclipse OpenJ9's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-843 (Access of Resource Using Incompatible Type ('Type Confusion')), CWE-121 (Stack-based Buffer Overflow), CWE-125 (Out-of-bounds Read).
How many critical Eclipse Foundation Eclipse OpenJ9 vulnerabilities are there?: Eclipse Foundation Eclipse OpenJ9 has 7 critical and 5 high-severity CVEs.
What is the average severity of Eclipse Foundation Eclipse OpenJ9 CVEs?: The average CVSS base score across Eclipse Foundation Eclipse OpenJ9's scored CVEs is 8.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Eclipse Foundation Eclipse OpenJ9 vulnerabilities

Monitor new Eclipse Foundation Eclipse OpenJ9 vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing