Duplicate Advisory: Eclipse IDE XXE in eclipse.platform

🗓️ 09 Nov 2023 09:30:26Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 7 Views

Eclipse IDE XXE vulnerability in versions < 2023-09

Reporter	Title	Published	Views	Family All 47
IBM Security Bulletins	Security Bulletin: IBM MQ is vulnerable to issues in Eclipse (CVE-2023-4218, CVE-2023-44487)	29 Feb 202421:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in eclipse affects IBM Business Automation Workflow - CVE-2023-4218	3 May 202505:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to a local authenticated attacker due to Eclipse IDE (CVE-2023-4218)	21 Feb 202415:50	–	ibm
IBM Security Bulletins	Security Bulletin: XML External Entity (XXE) injection vulnerability affects IBM Business Automation Workflow - CVE-2023-4218	3 May 202506:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM MQ shipped with IBM WebSphere Remote Server	19 Mar 202419:39	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in org.eclipse.core.runtime-3.14.0.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2023-4218)	2 Apr 202506:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Manage Component uses org.eclipse.core.runtime 3.10.0.v20140318-2214 which is vulnerable to CVE-2023-4218	24 Sep 202508:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ affect IBM Robotic Process Automation.	10 Jun 202422:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management - Engineering Test Management is impacted by vulnerabilities in Eclipse IDE versions	20 Apr 202620:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	10 Feb 202604:45	–	ibm

Vulners

Node

org.eclipse.platform eclipse.platformRange<4.29maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-4218
github	www.github.com/eclipse-emf/org.eclipse.emf/issues/10
github	www.github.com/eclipse-pde/eclipse.pde/pull/632/
github	www.github.com/eclipse-pde/eclipse.pde/pull/667/
github	www.github.com/eclipse-platform/eclipse.platform.releng.buildtools/pull/45
github	www.github.com/eclipse-platform/eclipse.platform/pull/761
github	www.github.com/eclipse-cdt/cdt/commit/c7169b3186d2fef20f97467c3e2ad78e2943ed1b
github	www.github.com/eclipse-jdt/eclipse.jdt.core/commit/38dd2a878f45cdb3d8d52090f1d6d1b532fd4c4d
github	www.github.com/eclipse-jdt/eclipse.jdt.ui/commit/13675b1f8a74f47de4da89ed0ded6af7c21dfbec
github	www.github.com/eclipse-platform/eclipse.platform.swt/commit/bf71db5ddcb967c0863dad4745367b54f49e06ba

09 Dec 2023 05:04Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.15

EPSS0.00026

SSVC

eclipse ide xxe vulnerability xml parsing