CVE-2019-17091

🗓️ 02 Oct 2019 14:15:12Reported by [email protected]Type

Eclipse Mojarra Reflected XSS vulnerability in PartialViewContextImpl.jav

Reporter	Title	Published	Views	Family All 34
BDU FSTEC	Eclipse Mojarra PartialViewContextImpl XSS	19 Nov 201900:00	–	bdu_fstec
Circl	CVE-2019-17091	9 Jan 202417:12	–	circl
CVE	CVE-2019-17091	2 Oct 201913:58	–	cve
Cvelist	CVE-2019-17091	2 Oct 201913:58	–	cvelist
Debian CVE	CVE-2019-17091	2 Oct 201913:58	–	debiancve
EUVD	EUVD-2022-5190	3 Oct 202520:07	–	euvd
Github Security Blog	Cross-site Scripting in Eclipse Mojarra	24 May 202216:57	–	github
Kaspersky	KLA11641 Multiple vulnerabilities in Oracle VirtualBox	5 Jan 202000:00	–	kaspersky
Mend	CVE-2019-17091	2 Oct 201913:58	–	mend
NCSC	Vulnerabilities fixed in Oracle Fusion Middleware	21 Jan 202100:00	–	ncsc

NVD

Node

eclipse mojarraRange2.3.0–2.3.10

oracle mojarra_javaserver_facesRange2.2.0–2.2.20

Node

oracle application_testing_suiteMatch13.2.0.1

oracle application_testing_suiteMatch13.3.0.1

oracle banking_enterprise_product_manufacturingMatch2.7.0

oracle banking_enterprise_product_manufacturingMatch2.8.0

oracle communications_diameter_signaling_routerRange8.0.0.0–8.4.0.5

oracle communications_network_integrityMatch7.3.5

oracle communications_network_integrityMatch7.3.6

oracle communications_unified_inventory_managementMatch7.3.0

oracle communications_unified_inventory_managementMatch7.4.0

oracle enterprise_data_qualityMatch12.2.1.3.0

oracle health_sciences_information_managerMatch3.0

oracle healthcare_data_repositoryMatch7.0

oracle primavera_p6_enterprise_project_portfolio_managementRange15.1.0.0–15.2.18.7

oracle primavera_p6_enterprise_project_portfolio_managementRange16.1.0.0–16.2.19.0

oracle primavera_p6_enterprise_project_portfolio_managementRange17.1.0.0–17.12.15.0

oracle primavera_p6_enterprise_project_portfolio_managementRange18.1.0.0–18.8.15.0

oracle primavera_p6_enterprise_project_portfolio_managementMatch19.12.0.0

oracle rapid_planningMatch12.1

oracle rapid_planningMatch12.2

oracle retail_advanced_inventory_planningMatch15.0

oracle retail_advanced_inventory_planningMatch16.0

oracle retail_assortment_planningMatch16.0.3

oracle retail_bulk_data_integrationMatch16.0.3.0

oracle retail_financial_integrationMatch15.0

oracle retail_financial_integrationMatch16.0

oracle retail_integration_busMatch15.0

oracle retail_integration_busMatch16.0

oracle retail_invoice_matchingMatch16.0

oracle retail_merchandising_systemMatch16.0

oracle retail_service_backboneMatch15.0

oracle retail_service_backboneMatch16.0

oracle retail_store_inventory_managementMatch14.0.4

oracle retail_store_inventory_managementMatch14.1.3

oracle retail_store_inventory_managementMatch15.0.3

oracle retail_store_inventory_managementMatch16.0.3

oracle secure_global_desktopMatch5.4

oracle secure_global_desktopMatch5.5

oracle time_and_laborRange12.2.6–12.2.11

Source	Link
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
oracle	www.oracle.com/security-alerts/cpujan2021.html
oracle	www.oracle.com/security-alerts/cpuapr2020.html
github	www.github.com/javaserverfaces/mojarra/compare/2.2.19...2.2.20
github	www.github.com/eclipse-ee4j/mojarra/compare/2.3.9-RELEASE...2.3.10-RELEASE
oracle	www.oracle.com/security-alerts/cpujan2020.html
github	www.github.com/javaserverfaces/mojarra/commit/ae1c234d0a6750822ac69d4ae26d90e3571f27fe
oracle	www.oracle.com/security-alerts/cpuoct2020.html
github	www.github.com/eclipse-ee4j/mojarra/files/3039198/advisory.txt
github	www.github.com/eclipse-ee4j/mojarra/pull/4567

17 Jun 2026 02:23Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.3

CVSS 3.16.1

EPSS0.02469

CWE-79