What’s Vulnerable › Vulnerabilities

CVE-2019-11776

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-08-09 · updated 2026-06-17
• Weakness: CWE-79

Description

In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context.

Affected products

• The Eclipse Foundation Eclipse BIRT (Business Intelligence Reporting Tool): from 1.0.0 through 4.7.0

References

• https://bugs.eclipse.org/bugs/show_bug.cgi?id=546816
• https://bugs.eclipse.org/bugs/show_bug.cgi?id=546816

Get alerted when CVE-2019-11776 or the next vulnerability affects your stack