The Eclipse Foundation Eclipse BIRT vulnerabilities

2 vulnerabilities

Known vulnerabilities in The Eclipse Foundation Eclipse BIRT, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2021-34427eclipsebusiness_intelligence_and_reporting_tools+1
EPSS score
57.98%
In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running instance.6.1CVE-2019-11776eclipsebusiness_intelligence_and_reporting_tools+1
EPSS score
0.90%
In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context.