Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2023-0100

eclipse-birt: RCE on the default configuration of BIRT Viewer

In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HTTP path for the report parameter (e.g. __report=http://xyz.com/report.rptdesign). If the host indicated in the __report parameter matched the HTTP Host header value, the report would be retrieved. However, the Host header can be tampered with on some configurations where no virtual hosts are put in place (e.g. in the default configuration of Apache Tomcat) or when the default host points to the BIRT server. This vulnerability was patched on Eclipse BIRT 4.13.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Eclipse
Products
Business Intelligence And Reporting Tools
CVE-2021-34427

eclipse-birt: an attacker can use query parameters to create a JSP file and inject JSP code into the running instance

In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running instance.

CVSS 3.1 · 9.8 Critical EPSS 58.0% KEV · Not listed
Vendors
Eclipse
Products
Business Intelligence And Reporting Tools
CVE-2019-11776

eclipse-birt: report viewer allows reflected XSS in __format url parameter

In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Eclipse
Products
Business Intelligence And Reporting Tools