PT-2013-2359

Name of the Vulnerable Software and Affected Versions IBM Eclipse Help System versions 3.4.3 through 3.6.2 IBM SPSS Data Collection versions 6.0 through 7.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL, potentially leading to cross-site...

CVE-2013-0599

IBM Eclipse Help System IEHS, as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by providing a crafted parameter path and then reading the debug information associated with the 500 HTTP...

CVE-2013-0599

IBM Eclipse Help System IEHS, as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by providing a crafted parameter path and then reading the debug information associated with the 500 HTTP...

CVE-2013-0599

The CVE-2013-0599 issue centers on the IBM Eclipse Help System (IEHS) used across IBM products (e.g., Data Studio, OmniFind/Content Analytics, WebSphere-related offerings). A remote attacker can obtain sensitive information by requesting a crafted parameter path or URL, which can trigger error me...

CVE-2013-0599: Exposure of Sensitive Information to an Unauthorized Actor

IBM Eclipse Help System IEHS, as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by providing a crafted parameter path and then reading the debug information associated with the 500 HTTP...

PT-2013-2453

Name of the Vulnerable Software and Affected Versions IBM Eclipse Help System IEHS versions 5.1.1 through 5.1.1.2 IBM Eclipse Help System IEHS versions 5.2 through 5.2.1 Description The issue allows remote attackers to obtain sensitive information by providing a crafted parameter path and then...

IBM Rational Business Developer Installed

IBM Rational Business Developer, an Eclipse-based programming workbench, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66306; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06";...

Code injection

IBM Eclipse Help System IEHS, as used in IBM Data Studio 3.1 and 3.1.1 and other products, allows remote authenticated users to read source code via a crafted URL...

CVE-2013-0467

CVE-2013-0467 concerns a vulnerability in the IBM Eclipse Help System (IEHS) that is shipped with multiple IBM products (notably IBM WebSphere Application Server, IBM InfoSphere Information Server, SPSS Data Collection, Content Analytics/OmniFind, Content Collector, and related IEHS-integrated co...

CVE-2013-0467: Undefined Security Weakness

IBM Eclipse Help System IEHS, as used in IBM Data Studio 3.1 and 3.1.1 and other products, allows remote authenticated users to read source code via a crafted URL...

PT-2013-2362

Name of the Vulnerable Software and Affected Versions IBM Eclipse Help System IEHS versions 3.1 and 3.1.1 Description The issue allows remote authenticated users to read source code via a crafted URL. Recommendations For IBM Eclipse Help System IEHS versions 3.1 and 3.1.1, consider restricting...

IBM WebSphere Application Server 8.5 < Fix Pack 1 Multiple Vulnerabilities

IBM WebSphere Application Server 8.5 before Fix Pack 1 appears to be running on the remote host and is, therefore, potentially affected by the following vulnerabilities : - An input validation error exists related to the 'Eclipse Help System' that can allow arbitrary redirect responses to HTTP...

PT-2012-1415

Name of the Vulnerable Software and Affected Versions IBM Lotus Symphony version 1.3.0 20090908.0900 Description The issue allows local users to gain privileges via a Trojan horse eclipse 1114.dll or emser645mi.dll file in the current working directory. This can be demonstrated by a directory tha...

Fedora 17 : redeclipse-1.2-12.fc17 (2012-11582)

A flaw was found in the way Red Eclipse handled config files. In cube2-engine games, game maps can be transmitted either from the server to a client, or from client to client. These maps include a config file mapname.cfg in 'cubescript' format, which allows for an attacker to send a malicious...

Scientific Linux Security Update : eclipse on SL6.x i386/x86_64

The Eclipse software development environment provides a set of tools for C/C++ and Java development. A cross-site scripting XSS flaw was found in the Eclipse Help Contents web application. An attacker could use this flaw to perform a cross-site scripting attack against victims by tricking them in...

CVE-2012-0186

Directory traversal vulnerability in the Eclipse Help component in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows remote attackers to discover the locations of files via a crafted URL...

CVE-2012-0186

Directory traversal vulnerability in the Eclipse Help component in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows remote attackers to discover the locations of files via a crafted URL...

PT-2012-2384

Name of the Vulnerable Software and Affected Versions IBM Lotus Expeditor versions 6.1.x through 6.2.x before 6.2 FP5+Security Pack Description The issue allows remote attackers to discover the locations of files via a crafted URL, due to a directory traversal vulnerability in the Eclipse Help...

CVE-2012-2159

Open redirect vulnerability in IBM Eclipse Help System IEHS, as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified...

Open redirect

Open redirect vulnerability in IBM Eclipse Help System IEHS, as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified...