Medium severity · published Oct 2, 2019
CVE-2019-17091
faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS…
6.1
CVSS
2.5%
EPSS
No
On KEV
Description
faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AT
Application Testing Suite · Oracle
13.2.0.1; 13.3.0.1 · source: NVD
BE
Banking Enterprise Product Manufacturing · Oracle
2.7.0; 2.8.0 · source: NVD
CD
Communications Diameter Signaling Router · Oracle
8.0.0.0 through 8.4.0.5 · source: NVD
CN
Communications Network Integrity · Oracle
7.3.5; 7.3.6 · source: NVD
CU
Communications Unified Inventory Management · Oracle
7.3.0; 7.4.0 · source: NVD
ED
Enterprise Data Quality · Oracle
12.2.1.3.0 · source: NVD
HS
Health Sciences Information Manager · Oracle
3.0 · source: NVD
HD
Healthcare Data Repository · Oracle
7.0 · source: NVD
MO
Mojarra · Eclipse
2.3.0 before 2.3.10 · source: NVD
MJ
Mojarra Javaserver Faces · Oracle
2.2.0 before 2.2.20 · source: NVD
PP
Primavera P6 Enterprise Project Portfolio Management · Oracle
15.1.0.0 through 15.2.18.7; 16.1.0.0 through 16.2.19.0; 17.1.0.0 through 17.12.15.0; 18.1.0.0 through 18.8.15.0; 19.12.0.0 · source: NVD
RP
Rapid Planning · Oracle
12.1; 12.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-17091
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-17091
Exploit
https://bugs.eclipse.org/bugs/show_bug.cgi?id=548244
Patch
https://github.com/eclipse-ee4j/mojarra/commit/8f70f2bd024f00ecd5b3dcca45df73edda29dcee
Patch
https://github.com/eclipse-ee4j/mojarra/commit/a3fa9573789ed5e867c43ea38374f4dbd5a8f81f
Release Notes
https://github.com/eclipse-ee4j/mojarra/compare/2.3.9-RELEASE...2.3.10-RELEASE
Exploit
https://github.com/eclipse-ee4j/mojarra/files/3039198/advisory.txt
Third Party Advisory
https://github.com/eclipse-ee4j/mojarra/issues/4556
More from Mojarra
7.5
CVE-2026-46581
In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, allowing an attacker to specify a URL to…
7.5
CVE-2018-14371
The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter
6.5
CVE-2020-6950
Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter