CVE-2008-7271

🗓️ 13 Jan 2011 18:35:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 76 Views🌐 WEB

Multiple XSS vulnerabilities in Eclipse IDE Help Contents web app (CVE-2008-7271

Reporter	Title	Published	Views	Family All 12
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Sales Center for WebSphere Commerce (CVE-2008-7271, CVE-2010-4647, CVE-2012-0186, CVE-2012-0191, CVE-2012-2159, CVE-2012-2161)	26 Sep 202205:45	–	ibm
Circl	CVE-2008-7271	24 Apr 200800:00	–	circl
Cvelist	CVE-2008-7271	13 Jan 201118:35	–	cvelist
Debian CVE	CVE-2008-7271	13 Jan 201118:35	–	debiancve
EUVD	EUVD-2008-7224	7 Oct 202500:30	–	euvd
NVD	CVE-2008-7271	13 Jan 201119:00	–	nvd
OpenVAS	Eclipse IDE < 3.6.2 Help Contents Multiple XSS Vulnerabilities	17 Feb 201100:00	–	openvas
Prion	Cross site scripting	13 Jan 201119:00	–	prion
Tenable Nessus	RHEL 5 : eclipse (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2008-7271	3 Mar 202500:00	–	nessus

NVD

Node

eclipse eclipse_ide

OR

eclipse eclipse_ideMatch3.3.2

Source	Link
r00tin	www.r00tin.blogspot.com/2008/04/eclipse-local-web-server-exploitation.html
bugs	www.bugs.eclipse.org/bugs/show_bug.cgi

Parameter	Position	Path	Description	CWE
searchWord	query param	/help/advanced/searchView.jsp	XSS via searchWord parameter in searchView.jsp	CWE-79
workingSet	request body	/help/advanced/workingSetManager.jsp	XSS via workingSet parameter in add action to workingSetManager.jsp	CWE-79

16 Jun 2026 23:03Current

5.6Medium risk

Vulners AI Score5.6

CVSS 24.3

EPSS0.01899

cve-2008-7271 xss eclipse ide help contents web application vulnerability nvd