Design/Logic Flaw

2019-08-0919:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

40.1%

JSON

In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim’s browser context.

CPENameOperatorVersion
business_intelligence_and_reporting_toolsge1.0.0
business_intelligence_and_reporting_toolsle4.7.0

CPE	Name	Operator	Version
	business_intelligence_and_reporting_tools	ge	1.0.0
	business_intelligence_and_reporting_tools	le	4.7.0

References

bugs.eclipse.org/bugs/show_bug.cgi?id=546816

0.001 Low

EPSS

Percentile

40.1%

JSON

Related for PRION:CVE-2019-11776