Memory Analyzer (Eclipse) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 27 known versions, newest CVE from 2023-12-11. Vendor: Eclipse.

CVEs of Memory Analyzer

• CVE-2023-6194 - CVSS 7.1 (high), 2023-12-11: In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit document type definition (DTD) references to…
• CVE-2019-17635 - CVSS 7.8 (high), 2020-01-17: Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability if an index file of a parsed heap dump is replaced by a…
• CVE-2019-17634 - CVSS 9 (critical), 2020-01-17: Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS) vulnerability when generating an HTML report from a malicious…