CVE-2019-11776CWE-79

CVE-2019-11776: vulnerability in The Eclipse Foundation Eclipse BIRT

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context.
Related CVEs — The Eclipse Foundation Eclipse BIRT

In the same product, most dangerous first.