CVE-2021-34427: vulnerability in The Eclipse Foundation Eclipse BIRT
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
72Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 58%
from disclosure to weapon1818 days
Published on NVDJun 25
1st PoC+1818d
VulnCheck+1635d
What the vendors declare (VEX)
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Red HatVEX document ↗
Not affected
1 product (2 components) — because the vulnerable code is not present in the product
Red Hat Enterprise Linux 6
In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running instance.
Affected products
The Eclipse Foundation · Eclipse BIRTpublic PoCs found — 1
vulncheckvulncheck.com/xdb/45ff47b98d71unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — The Eclipse Foundation Eclipse BIRT
In the same product, most dangerous first.