Approved changes feed: RSS · Atom

cpe:2.3:a:eclipse:platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEclipse (fa988180-604e-5c1f-93ea-65b5297000fc)
ProductPlatform (37809f16-da2d-5767-bcbe-f3a29a9e963a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/eclipse-platform/eclipse.platform purl2cpe 2026-06-01 10:15:02.964925

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-27225 vulnerable 2026-06-08 05:23:52.437401 Details available
In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an unauthenticated local attacker to issue active help commands to the associated Eclipse Platform process or Eclipse Rich Client Platform process.
Published: 2021-03-09T18:15:16.000Z
Updated: 2024-08-04T16:11:36.031Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.