Eclipse Web Tools Platform vulnerabilities

1 vulnerability

Known vulnerabilities in Eclipse Web Tools Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.1CVE-2019-17637debianeclipse-wtp+4
EPSS score
0.88%
In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server when edited or validated, even when external entity resolution is disabled in the user preferences.