The Eclipse Foundation Eclipse Memory Analyzer
2 CVEs affecting The Eclipse Foundation Eclipse Memory Analyzer. Latest disclosed: 2020-01-17. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-17634 | Critical | 9.0 | 2020-01-17 | Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS) vulnerability when generating an HTML report from a malicious heap… |
CVE-2019-17635 | High | 7.8 | 2020-01-17 | Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability if an index file of a parsed heap dump is replaced by a malicio… |