The Eclipse Foundation Eclipse OMR
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-41035 | unspecified – < 0.29.0 | In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface meth | CRITICAL 9.8 | 1.8 % | ||
| CVE-2019-11774 | unspecified – < 0.1 | Prior to 0.1, all builds of Eclipse OMR contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop | HIGH 7.4 | 0.7 % | ||
| CVE-2019-11773 | unspecified – < 0.1 | Prior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection and privilege elevation by local users. | HIGH 7.8 | 0.4 % |