Approved changes feed: RSS · Atom

cpe:2.3:a:the_eclipse_foundation:eclipse_birt:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThe Eclipse Foundation (bb2d55d2-5306-5bc8-beb2-981f5d5392e4)
ProductEclipse Birt (e80636e0-26b9-5425-b0e1-8bd6194befed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-34427 vulnerable 2026-06-03 14:44:45.004823 Details available
In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running instance.
Published: 2021-06-25T00:00:00.000Z
Updated: 2024-08-04T00:12:50.360Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11776 vulnerable 2026-06-03 14:39:33.843107 Details available
In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context.
Published: 2019-08-09T18:41:16.000Z
Updated: 2024-08-04T23:03:32.740Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.