Medium severity · published Aug 9, 2019
CVE-2019-11776
In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter
6.1
CVSS
0.9%
EPSS
No
On KEV
Description
In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BI
Business Intelligence And Reporting Tools · Eclipse
1.0.0 through 4.7.0 · source: NVD
Affected product
BI
Business Intelligence And Reporting Tools
Eclipse
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-11776
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-11776
Exploit
https://bugs.eclipse.org/bugs/show_bug.cgi?id=546816
More from Business Intelligence And Reporting Tools
9.8
CVE-2021-34427
In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code…
8.8
CVE-2023-0100
In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HTTP path for the report parameter (e.g