Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority MEDIUM 44

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled `_size`, `_paddingSize`, and `_dataOffset` fields during `DataDescriptor` message deseria…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00372 Published 2026-10-21 Fixed in 0.63 CWE-125
Priority MEDIUM 44

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote denial of service.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00421 Published 2026-10-21 Fixed in 0.63 CWE-190