Skip to content
OpenAdvisories

Product · Eclipse Foundation

Eclipse Ditto

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-84175

    In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URL…

    Eclipse Foundation Eclipse Ditto
  • Medium 6.5
    CVE-2024-5165

    Eclipse Ditto User Interface vulnerable to XSS due to Improper Neutralization of Input

    In Eclipse Ditto versions 3.0.0 to 3.5.5, the user input of several input fields of the Eclipse Ditto Explorer User Interface https://eclipse.dev/ditto/user-interface.html was not properly neutralized and thus vulnerable to both Reflected and Stored XSS (Cros…

    Eclipse Foundation Eclipse Ditto org.eclipse.ditto:ditto Maven