Cross-site Scripting (XSS)

2020-04-1001:01:25

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.521 Medium

EPSS

Percentile

97.6%

JSON

eclipse-emf is vulnerable to cross-site scripting (XSS). The vulnerability exists as an attacker could use this flaw to perform a cross-site scripting attack against victims by tricking them into visiting a specially-crafted Eclipse Help URL.

CPENameOperatorVersion
eclipse-emfeq2.5.0__4.4.el6
eclipse-mylyneq3.3.2__4.5.el6
eclipse-valgrindeq0.5.0__1.el6
jetty-eclipseeq6.1.21__1.el6
sat4jeq2.1.1__1.2.el6
objectweb-asmeq3.1__7.2.el6
eclipse-oprofileeq0.5.0__1.el6
eclipse-changelogeq2.6.7__5.el6
eclipse-linuxprofilingframeworkeq0.3.0__5.el6
eclipse-cdteq6.0.2__3.el6

Name	Operator	Version
eclipse-emf	eq	2.5.0__4.4.el6
eclipse-mylyn	eq	3.3.2__4.5.el6
eclipse-valgrind	eq	0.5.0__1.el6
jetty-eclipse	eq	6.1.21__1.el6
sat4j	eq	2.1.1__1.2.el6
objectweb-asm	eq	3.1__7.2.el6
eclipse-oprofile	eq	0.5.0__1.el6
eclipse-changelog	eq	2.6.7__5.el6
eclipse-linuxprofilingframework	eq	0.3.0__5.el6
eclipse-cdt	eq	6.0.2__3.el6