Eclipse Wild Web Developer vulnerabilities

2 CVEs affecting Eclipse Wild Web Developer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-18213, published 2019-10-23.

More from Eclipse.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-18212, published 2019-10-23. Medium severity, CVSS 6.5. EPSS: 2.8% chance of exploitation in the next 30 days. XMLLanguageService.java in XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Studio and other products, allows a remote…
• CVE-2019-18213, published 2019-10-23. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Studio and other products, allows XXE via a crafted XML document, with…