Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

eclipse / mojarra CVEs

Beta · best-effort

3 CVEs tagged to eclipse / mojarra — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to eclipse vendor archive

CVE-2020-6950

Published Jun 2, 2021

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2019-17091

Published Oct 2, 2019

faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS be…

CVSS 6.1 · Medium
Vendor/product tagsBeta · best-effort

CVE-2018-14371

Published Jul 18, 2018

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download confi…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort
Showing 1-3 of 3 CVEsPage 1 of 1