The Eclipse Foundation Vulnerabilities and Affected Products
Vulnerabilities associated with Eclipse BIRT.
Products
Clear product- Eclipse Jetty23 vulnerabilities
- Eclipse Mosquitto16 vulnerabilities
- Eclipse OpenJ914 vulnerabilities
- Eclipse Theia6 vulnerabilities
- Eclipse Vert.x6 vulnerabilities
- Eclipse Californium3 vulnerabilities
- Eclipse Kura3 vulnerabilities
- Eclipse OMR3 vulnerabilities
- Eclipse BIRT2 vulnerabilities
- Eclipse Che2 vulnerabilities
- Eclipse Hawkbit2 vulnerabilities
- Eclipse Hono2 vulnerabilities
- Eclipse Memory Analyzer2 vulnerabilities
- @theia/plugin-ext1 vulnerability
- Eclipse BIRT (Business Intelligence Reporting Tool)1 vulnerability
- Eclipse Buildship1 vulnerability
- Eclipse Equinox1 vulnerability
- Eclipse Equinox p21 vulnerability
- Eclipse GlassFish1 vulnerability
- Eclipse Jersey1 vulnerability
- Eclipse Lyo1 vulnerability
- Eclipse Paho1 vulnerability
- Eclipse Paho MQTT C Client1 vulnerability
- Eclipse Platform1 vulnerability
- Eclipse Sphinx1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-34427CRITICAL | eclipse business_intelligence_and_reporting_tools Improper Input ValidationIn Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running instance. | CVSS9.8v3.1 | EPSS58% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2019-11776MEDIUM | In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context. CWE-79Aug 9, 2019 | CVSS6.1v3.1 | EPSS0.897% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |