Every CVE whose affected-product data names Eclipse Hono, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2020-27220 — CVSS 8.8 (high): The Eclipse Hono AMQP and MQTT protocol adapters do not check whether an authenticated gateway device is authorized to receive command &…
CVE-2020-27217 — CVSS 7.5 (high): In Eclipse Hono version 1.3.0 and 1.4.0 the AMQP protocol adapter does not verify the size of AMQP messages received from devices. In…