CVE-2019-11776

2019-08-0919:15:11

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.1%

JSON

In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim’s browser context.

CPENameOperatorVersion
birteq201209121203
birteq201505061331
birteq201210270340
birteq201309222030
birteq201302251425
birteq201502021415
birteq2012061217
birteqBIRT_4_6_0_Release_201606072112
birteq201208281709
birteq201308301349

Name	Operator	Version
birt	eq	201209121203
birt	eq	201505061331
birt	eq	201210270340
birt	eq	201309222030
birt	eq	201302251425
birt	eq	201502021415
birt	eq	2012061217
birt	eq	BIRT_4_6_0_Release_201606072112
birt	eq	201208281709
birt	eq	201308301349