{"schemaVersion":3,"id":"CVE-2023-4218","aliases":["SUSE-SU-2024:1304-1","UBUNTU-CVE-2023-4218","GHSA-j24h-xcpc-9jw8"],"status":"published","duplicateOf":null,"title":null,"description":"In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).","dates":{"published":"2023-11-09T08:26:51.567Z","modified":"2024-09-03T19:26:14.225Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","exploitability":3.3,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","exploitability":3.3,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0039,"percentile":0.31585,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.0039},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0039,"percentile":0.31585}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0039,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0039,"percentile":0.31585}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_7E8630B9567650F8","name":"Exploit Reference (gitlab.eclipse.org)","source":"reference","url":"https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/8","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-611","name":"Improper Restriction of XML External Entity Reference","description":"The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/611.html"}],"affected":[{"vendor":"ubuntu","product":"eclipse","name":"eclipse","label":"eclipse","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/eclipse","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"eclipse foundation","product":"eclipse ide","name":"Eclipse IDE","label":"eclipse ide","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 4.29","noFixRecorded":false,"fixedIn":null},{"text":"< 2023-09","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.29 | < 2023-09","eol":null,"hubHref":"/vendor/eclipse_foundation/eclipse_ide"},{"vendor":"eclipse foundation","product":"org.eclipse.core.runtime","name":"org.eclipse.core.runtime","label":"org.eclipse.core.runtime","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 3.29.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.29.0","eol":null,"hubHref":"/vendor/eclipse_foundation/orgeclipsecoreruntime"},{"vendor":"eclipse foundation","product":"org.eclipse.pde","name":"org.eclipse.pde","label":"org.eclipse.pde","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.13.2400","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 3.13.2400","eol":null,"hubHref":"/vendor/eclipse_foundation/orgeclipsepde"},{"vendor":"eclipse","product":"eclipse_ide","name":"eclipse ide","label":"eclipse_ide","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 4.29","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.29","eol":null,"hubHref":"/vendor/eclipse/eclipse_ide"},{"vendor":"eclipse","product":"org.eclipse.core.runtime","name":"org.eclipse.core.runtime","label":"org.eclipse.core.runtime","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 3.29.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.29.0","eol":null,"hubHref":"/vendor/eclipse/orgeclipsecoreruntime"},{"vendor":"eclipse","product":"pde","name":"pde","label":"pde","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 3.13.2400","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.13.2400","eol":null,"hubHref":"/vendor/eclipse/pde"},{"vendor":"org.eclipse.jdt","product":"org.eclipse.jdt.ui","name":"org.eclipse.jdt:org.eclipse.jdt.ui","label":"org.eclipse.jdt.ui","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.eclipse.jdt/org.eclipse.jdt.ui","purlType":"maven","versions":[{"text":"< 3.30.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.30.0","eol":null,"hubHref":null},{"vendor":"org.eclipse.platform","product":"org.eclipse.core.runtime","name":"org.eclipse.platform:org.eclipse.core.runtime","label":"org.eclipse.core.runtime","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.eclipse.platform/org.eclipse.core.runtime","purlType":"maven","versions":[{"text":"< 3.29.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.29.0","eol":null,"hubHref":null},{"vendor":"org.eclipse.platform","product":"org.eclipse.jface","name":"org.eclipse.platform:org.eclipse.jface","label":"org.eclipse.jface","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.eclipse.platform/org.eclipse.jface","purlType":"maven","versions":[{"text":"< 3.31.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.31.0","eol":null,"hubHref":null},{"vendor":"org.eclipse.platform","product":"org.eclipse.platform","name":"org.eclipse.platform:org.eclipse.platform","label":"org.eclipse.platform","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.eclipse.platform/org.eclipse.platform","purlType":"maven","versions":[{"text":"< 4.29.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.29.0","eol":null,"hubHref":null},{"vendor":"org.eclipse.platform","product":"org.eclipse.ui.forms","name":"org.eclipse.platform:org.eclipse.ui.forms","label":"org.eclipse.ui.forms","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.eclipse.platform/org.eclipse.ui.forms","purlType":"maven","versions":[{"text":"< 3.13.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.13.0","eol":null,"hubHref":null},{"vendor":"org.eclipse.platform","product":"org.eclipse.ui.ide","name":"org.eclipse.platform:org.eclipse.ui.ide","label":"org.eclipse.ui.ide","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.eclipse.platform/org.eclipse.ui.ide","purlType":"maven","versions":[{"text":"< 3.21.100","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.21.100","eol":null,"hubHref":null},{"vendor":"org.eclipse.platform","product":"org.eclipse.ui.workbench","name":"org.eclipse.platform:org.eclipse.ui.workbench","label":"org.eclipse.ui.workbench","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.eclipse.platform/org.eclipse.ui.workbench","purlType":"maven","versions":[{"text":"< 3.130.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.130.0","eol":null,"hubHref":null},{"vendor":"org.eclipse.platform","product":"org.eclipse.urischeme","name":"org.eclipse.platform:org.eclipse.urischeme","label":"org.eclipse.urischeme","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.eclipse.platform/org.eclipse.urischeme","purlType":"maven","versions":[{"text":"< 1.3.100","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.100","eol":null,"hubHref":null},{"vendor":"opensuse","product":"eclipse-bootstrap&distro=openSUSE Leap 15.5","name":"eclipse-bootstrap","label":"eclipse-bootstrap&distro=openSUSE Leap 15.5","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/eclipse-bootstrap&distro=openSUSE Leap 15.5","purlType":"rpm","versions":[{"text":"< 4.15-150200.4.16.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15-150200.4.16.5","eol":null,"hubHref":null},{"vendor":"opensuse","product":"eclipse-emf-bootstrap&distro=openSUSE Leap 15.5","name":"eclipse-emf-bootstrap","label":"eclipse-emf-bootstrap&distro=openSUSE Leap 15.5","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/eclipse-emf-bootstrap&distro=openSUSE Leap 15.5","purlType":"rpm","versions":[{"text":"< 2.22.0-150200.4.9.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.0-150200.4.9.3","eol":null,"hubHref":null},{"vendor":"opensuse","product":"eclipse-emf&distro=openSUSE Leap 15.5","name":"eclipse-emf","label":"eclipse-emf&distro=openSUSE Leap 15.5","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/eclipse-emf&distro=openSUSE Leap 15.5","purlType":"rpm","versions":[{"text":"< 2.22.0-150200.4.9.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.0-150200.4.9.3","eol":null,"hubHref":null},{"vendor":"opensuse","product":"eclipse&distro=openSUSE Leap 15.5","name":"eclipse","label":"eclipse&distro=openSUSE Leap 15.5","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/eclipse&distro=openSUSE Leap 15.5","purlType":"rpm","versions":[{"text":"< 4.15-150200.4.16.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15-150200.4.16.4","eol":null,"hubHref":null},{"vendor":"opensuse","product":"maven-surefire-plugins&distro=openSUSE Leap 15.5","name":"maven-surefire-plugins","label":"maven-surefire-plugins&distro=openSUSE Leap 15.5","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/maven-surefire-plugins&distro=openSUSE Leap 15.5","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"maven-surefire-provider-junit5&distro=openSUSE Leap 15.5","name":"maven-surefire-provider-junit5","label":"maven-surefire-provider-junit5&distro=openSUSE Leap 15.5","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/maven-surefire-provider-junit5&distro=openSUSE Leap 15.5","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"maven-surefire&distro=openSUSE Leap 15.5","name":"maven-surefire","label":"maven-surefire&distro=openSUSE Leap 15.5","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/maven-surefire&distro=openSUSE Leap 15.5","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"tycho-bootstrap&distro=openSUSE Leap 15.5","name":"tycho-bootstrap","label":"tycho-bootstrap&distro=openSUSE Leap 15.5","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/tycho-bootstrap&distro=openSUSE Leap 15.5","purlType":"rpm","versions":[{"text":"< 1.6.0-150200.4.9.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.0-150200.4.9.2","eol":null,"hubHref":null},{"vendor":"opensuse","product":"tycho&distro=openSUSE Leap 15.5","name":"tycho","label":"tycho&distro=openSUSE Leap 15.5","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/tycho&distro=openSUSE Leap 15.5","purlType":"rpm","versions":[{"text":"< 1.6.0-150200.4.9.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.0-150200.4.9.5","eol":null,"hubHref":null},{"vendor":"suse","product":"eclipse-bootstrap&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5","name":"eclipse-bootstrap","label":"eclipse-bootstrap&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/eclipse-bootstrap&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5","purlType":"rpm","versions":[{"text":"< 4.15-150200.4.16.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15-150200.4.16.5","eol":null,"hubHref":null},{"vendor":"suse","product":"eclipse-emf-bootstrap&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5","name":"eclipse-emf-bootstrap","label":"eclipse-emf-bootstrap&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/eclipse-emf-bootstrap&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5","purlType":"rpm","versions":[{"text":"< 2.22.0-150200.4.9.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.0-150200.4.9.3","eol":null,"hubHref":null},{"vendor":"suse","product":"eclipse-emf&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5","name":"eclipse-emf","label":"eclipse-emf&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/eclipse-emf&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5","purlType":"rpm","versions":[{"text":"< 2.22.0-150200.4.9.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.0-150200.4.9.3","eol":null,"hubHref":null},{"vendor":"suse","product":"eclipse&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5","name":"eclipse","label":"eclipse&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/eclipse&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5","purlType":"rpm","versions":[{"text":"< 4.15-150200.4.16.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15-150200.4.16.4","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire-plugins&distro=SUSE Enterprise Storage 7.1","name":"maven-surefire-plugins","label":"maven-surefire-plugins&distro=SUSE Enterprise Storage 7.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire-plugins&distro=SUSE Enterprise Storage 7.1","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire-plugins&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","name":"maven-surefire-plugins","label":"maven-surefire-plugins&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire-plugins&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire-plugins&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","name":"maven-surefire-plugins","label":"maven-surefire-plugins&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire-plugins&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire-plugins&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","name":"maven-surefire-plugins","label":"maven-surefire-plugins&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire-plugins&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire-plugins&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","name":"maven-surefire-plugins","label":"maven-surefire-plugins&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire-plugins&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire-plugins&distro=SUSE Linux Enterprise Module for Development Tools 15 SP5","name":"maven-surefire-plugins","label":"maven-surefire-plugins&distro=SUSE Linux Enterprise Module for Development Tools 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire-plugins&distro=SUSE Linux Enterprise Module for Development Tools 15 SP5","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire-plugins&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","name":"maven-surefire-plugins","label":"maven-surefire-plugins&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire-plugins&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire-plugins&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","name":"maven-surefire-plugins","label":"maven-surefire-plugins&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire-plugins&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire-plugins&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","name":"maven-surefire-plugins","label":"maven-surefire-plugins&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire-plugins&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire-plugins&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","name":"maven-surefire-plugins","label":"maven-surefire-plugins&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire-plugins&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire-plugins&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","name":"maven-surefire-plugins","label":"maven-surefire-plugins&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire-plugins&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire-plugins&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","name":"maven-surefire-plugins","label":"maven-surefire-plugins&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire-plugins&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire&distro=SUSE Enterprise Storage 7.1","name":"maven-surefire","label":"maven-surefire&distro=SUSE Enterprise Storage 7.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire&distro=SUSE Enterprise Storage 7.1","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","name":"maven-surefire","label":"maven-surefire&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","name":"maven-surefire","label":"maven-surefire&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","name":"maven-surefire","label":"maven-surefire&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","name":"maven-surefire","label":"maven-surefire&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire&distro=SUSE Linux Enterprise Module for Development Tools 15 SP5","name":"maven-surefire","label":"maven-surefire&distro=SUSE Linux Enterprise Module for Development Tools 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire&distro=SUSE Linux Enterprise Module for Development Tools 15 SP5","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","name":"maven-surefire","label":"maven-surefire&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","name":"maven-surefire","label":"maven-surefire&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","name":"maven-surefire","label":"maven-surefire&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","name":"maven-surefire","label":"maven-surefire&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","name":"maven-surefire","label":"maven-surefire&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"maven-surefire&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","name":"maven-surefire","label":"maven-surefire&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/maven-surefire&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","purlType":"rpm","versions":[{"text":"< 2.22.2-150200.3.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.22.2-150200.3.9.9.1","eol":null,"hubHref":null}],"affectedCount":52,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/8","label":"gitlab.eclipse.org/security/vulnerability-reports/-/issues/8","hostname":"gitlab.eclipse.org","tags":["REPORT","WEB","Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://github.com/eclipse-pde/eclipse.pde/pull/632/","label":"github.com/eclipse-pde/eclipse.pde/pull/632/","hostname":"github.com","tags":["REPORT","Patch"]},{"url":"https://github.com/eclipse-pde/eclipse.pde/pull/667/","label":"github.com/eclipse-pde/eclipse.pde/pull/667/","hostname":"github.com","tags":["REPORT","Patch"]},{"url":"https://github.com/eclipse-platform/eclipse.platform/pull/761","label":"github.com/eclipse-platform/eclipse.platform/pull/761","hostname":"github.com","tags":["REPORT","WEB","Patch"]},{"url":"https://github.com/eclipse-platform/eclipse.platform.releng.buildtools/pull/45","label":"github.com/eclipse-platform/eclipse.platform.releng.buildtools/pull/45","hostname":"github.com","tags":["REPORT","WEB","Patch"]},{"url":"https://github.com/eclipse-platform/eclipse.platform.ui/commit/f243cf0a28785b89b7c50bf4e1cce48a917d89bd","label":"github.com/eclipse-platform/eclipse.platform.ui/commit/f243cf0a28785b89b7c50bf4e1cce48a917d89bd","hostname":"github.com","tags":["REPORT","WEB","Patch"]},{"url":"https://github.com/eclipse-jdt/eclipse.jdt.ui/commit/13675b1f8a74f47de4da89ed0ded6af7c21dfbec","label":"github.com/eclipse-jdt/eclipse.jdt.ui/commit/13675b1f8a74f47de4da89ed0ded6af7c21dfbec","hostname":"github.com","tags":["REPORT","WEB","Patch"]},{"url":"https://github.com/eclipse-jdt/eclipse.jdt.core/commit/38dd2a878f45cdb3d8d52090f1d6d1b532fd4c4d","label":"github.com/eclipse-jdt/eclipse.jdt.core/commit/38dd2a878f45cdb3d8d52090f1d6d1b532fd4c4d","hostname":"github.com","tags":["REPORT","WEB","Patch"]},{"url":"https://github.com/eclipse-emf/org.eclipse.emf/issues/10","label":"github.com/eclipse-emf/org.eclipse.emf/issues/10","hostname":"github.com","tags":["REPORT","WEB","Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/eclipse-platform/eclipse.platform.swt/commit/bf71db5ddcb967c0863dad4745367b54f49e06ba","label":"github.com/eclipse-platform/eclipse.platform.swt/commit/bf71db5ddcb967c0863dad4745367b54f49e06ba","hostname":"github.com","tags":["REPORT","WEB","Patch"]},{"url":"https://github.com/eclipse-cdt/cdt/commit/c7169b3186d2fef20f97467c3e2ad78e2943ed1b","label":"github.com/eclipse-cdt/cdt/commit/c7169b3186d2fef20f97467c3e2ad78e2943ed1b","hostname":"github.com","tags":["REPORT","WEB","Patch"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241304-1/","label":"www.suse.com/support/update/announcement/2024/suse-su-20241304-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1216992","label":"bugzilla.suse.com/1216992","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4218","label":"www.suse.com/security/cve/CVE-2023-4218","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2023-4218","label":"ubuntu.com/security/CVE-2023-4218","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4218","label":"www.cve.org/CVERecord?id=CVE-2023-4218","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://github.com/eclipse-platform/eclipse.platform/security/advisories/GHSA-j24h-xcpc-9jw8","label":"github.com/eclipse-platform/eclipse.platform/security/advisories/GHSA-j24h-xcpc-9jw8","hostname":"github.com","tags":["WEB"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4218","label":"nvd.nist.gov/vuln/detail/CVE-2023-4218","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/eclipse-pde/eclipse.pde/pull/632","label":"github.com/eclipse-pde/eclipse.pde/pull/632","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/eclipse-pde/eclipse.pde/pull/667","label":"github.com/eclipse-pde/eclipse.pde/pull/667","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/eclipse-platform/eclipse.platform/commit/5dc372a0c5002b7f22e5d49eaa1cbf0916455daf","label":"github.com/eclipse-platform/eclipse.platform/commit/5dc372a0c5002b7f22e5d49eaa1cbf0916455daf","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/eclipse-platform/eclipse.platform","label":"github.com/eclipse-platform/eclipse.platform","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2023-11-09T08:26:51.567Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-03T19:26:14.225Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T16:01:41.206Z","stale":false,"partial":false}}