CVE-2019-17091

🗓️ 02 Oct 2019 13:58:49Reported by mitreType

CVE-2019-17091: Reflected XSS vulnerability in Mojarra Eclips

Reporter	Title	Published	Views	Family All 25
Circl	CVE-2019-17091	9 Jan 202417:12	–	circl
Cvelist	CVE-2019-17091	2 Oct 201913:58	–	cvelist
Debian CVE	CVE-2019-17091	2 Oct 201913:58	–	debiancve
EUVD	EUVD-2022-5190	3 Oct 202520:07	–	euvd
Github Security Blog	Cross-site Scripting in Eclipse Mojarra	24 May 202216:57	–	github
Kaspersky	KLA11641 Multiple vulnerabilities in Oracle VirtualBox	5 Jan 202000:00	–	kaspersky
NCSC	Vulnerabilities fixed in Oracle Fusion Middleware	21 Jan 202100:00	–	ncsc
NVD	CVE-2019-17091	2 Oct 201914:15	–	nvd
Oracle	Oracle Critical Patch Update Advisory - April 2020	14 Apr 202000:00	–	oracle
Oracle	Oracle Critical Patch Update Advisory - April 2023	18 Apr 202300:00	–	oracle

NVD

Node

eclipse mojarraRange2.3.0–2.3.10

oracle mojarra_javaserver_facesRange2.2.0–2.2.20

Node

oracle application_testing_suiteMatch13.2.0.1

oracle application_testing_suiteMatch13.3.0.1

oracle banking_enterprise_product_manufacturingMatch2.7.0

oracle banking_enterprise_product_manufacturingMatch2.8.0

oracle communications_diameter_signaling_routerRange8.0.0.0–8.4.0.5

oracle communications_network_integrityMatch7.3.5

oracle communications_network_integrityMatch7.3.6

oracle communications_unified_inventory_managementMatch7.3.0

oracle communications_unified_inventory_managementMatch7.4.0

oracle enterprise_data_qualityMatch12.2.1.3.0

oracle health_sciences_information_managerMatch3.0

oracle healthcare_data_repositoryMatch7.0

oracle primavera_p6_enterprise_project_portfolio_managementRange15.1.0.0–15.2.18.7

oracle primavera_p6_enterprise_project_portfolio_managementRange16.1.0.0–16.2.19.0

oracle primavera_p6_enterprise_project_portfolio_managementRange17.1.0.0–17.12.15.0

oracle primavera_p6_enterprise_project_portfolio_managementRange18.1.0.0–18.8.15.0

oracle primavera_p6_enterprise_project_portfolio_managementMatch19.12.0.0

oracle rapid_planningMatch12.1

oracle rapid_planningMatch12.2

oracle retail_advanced_inventory_planningMatch15.0

oracle retail_advanced_inventory_planningMatch16.0

oracle retail_assortment_planningMatch16.0.3

oracle retail_bulk_data_integrationMatch16.0.3.0

oracle retail_financial_integrationMatch15.0

oracle retail_financial_integrationMatch16.0

oracle retail_integration_busMatch15.0

oracle retail_integration_busMatch16.0

oracle retail_invoice_matchingMatch16.0

oracle retail_merchandising_systemMatch16.0

oracle retail_service_backboneMatch15.0

oracle retail_service_backboneMatch16.0

oracle retail_store_inventory_managementMatch14.0.4

oracle retail_store_inventory_managementMatch14.1.3

oracle retail_store_inventory_managementMatch15.0.3

oracle retail_store_inventory_managementMatch16.0.3

oracle secure_global_desktopMatch5.4

oracle secure_global_desktopMatch5.5

oracle time_and_laborRange12.2.6–12.2.11

Source	Link
github	www.github.com/eclipse-ee4j/mojarra/compare/2.3.9-RELEASE...2.3.10-RELEASE
github	www.github.com/eclipse-ee4j/mojarra/commit/a3fa9573789ed5e867c43ea38374f4dbd5a8f81f
oracle	www.oracle.com/security-alerts/cpujan2020.html
oracle	www.oracle.com/security-alerts/cpuapr2020.html
github	www.github.com/eclipse-ee4j/mojarra/commit/8f70f2bd024f00ecd5b3dcca45df73edda29dcee
github	www.github.com/javaserverfaces/mojarra/commit/ae1c234d0a6750822ac69d4ae26d90e3571f27fe
oracle	www.oracle.com/security-alerts/cpujan2021.html
github	www.github.com/eclipse-ee4j/mojarra/pull/4567
bugs	www.bugs.eclipse.org/bugs/show_bug.cgi
oracle	www.oracle.com/security-alerts/cpujan2022.html

21 Nov 2024 04:31Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3

CVSS 3.16.1

EPSS0.05622

CWE-79