Cross site scripting

2019-10-0214:15:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.0%

JSON

faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled.

CPENameOperatorVersion
mojarrage2.3.0
mojarralt2.3.10
application_testing_suiteeq13.2.0.1
application_testing_suiteeq13.3.0.1
banking_enterprise_product_manufacturingeq2.7.0
banking_enterprise_product_manufacturingeq2.8.0
communications_diameter_signaling_routerge8.0.0.0
communications_diameter_signaling_routerle8.4.0.5
communications_network_integrityeq7.3.5
communications_network_integrityeq7.3.6

Name	Operator	Version
mojarra	ge	2.3.0
mojarra	lt	2.3.10
application_testing_suite	eq	13.2.0.1
application_testing_suite	eq	13.3.0.1
banking_enterprise_product_manufacturing	eq	2.7.0
banking_enterprise_product_manufacturing	eq	2.8.0
communications_diameter_signaling_router	ge	8.0.0.0
communications_diameter_signaling_router	le	8.4.0.5
communications_network_integrity	eq	7.3.5
communications_network_integrity	eq	7.3.6