Oracle Mojarra Javaserver Faces vulnerabilities

1 vulnerability

Known vulnerabilities in Oracle Mojarra Javaserver Faces, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2019-17091eclipsemojarra+24
EPSS score
2.47%
faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled.