Unscored severity · published Jan 13, 2011
CVE-2010-4647
Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject…
–
CVSS
5.7%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.7% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EI
Eclipse Ide · Eclipse
through 3.6.1; 1.0; 2.0; 2.0.1; 2.0.2; 2.1; +33 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4647
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4647
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052532.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052554.html
Exploit
http://openwall.com/lists/oss-security/2011/01/06/16
Exploit
http://openwall.com/lists/oss-security/2011/01/06/7
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2011:032
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2011-0568.html
More from Eclipse Ide
5.0
CVE-2023-4218
In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks
–
CVE-2008-7271
Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject…