Product
eclipse business intelligence and reporting tools
3 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2023-0100
CVE-2021-34427
CVE-2019-11776
>= 2.6.2 and < 4.13.0
In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an a
<= 4.8.0
In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from rem
>= 1.0.0 and <= 4.7.0
In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in