Eclipse

Business Intelligence And Reporting Tools

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-0100

  • EPSS 0.34%
  • Published 15.03.2023 15:15:09
  • Last modified 27.02.2025 15:15:35

In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HTTP path for the report parameter (e.g. __report=http://xyz.com/report.rptdesign). If the host indicated in the...

9.8

CVE-2021-34427

Exploit
  • EPSS 7.06%
  • Published 25.06.2021 19:15:09
  • Last modified 21.11.2024 06:10:23

In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running instance.

6.1

CVE-2019-11776

Exploit
  • EPSS 0.3%
  • Published 09.08.2019 19:15:11
  • Last modified 21.11.2024 04:21:46

In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context.