Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade eclipse-oprofileUpgrade eclipse-pdeUpgrade sat4jUpgrade icu4j-javadocUpgrade eclipse-mylyn-javaUpgrade eclipse-linuxprofilingframeworkUpgrade eclipse-emf-examplesUpgrade icu4jUpgrade eclipse-mylyn-cdtUpgrade eclipse-jdtUpgrade eclipse-mylyn-webtasksUpgrade eclipse-emf-sdkUpgrade eclipse-emfUpgrade eclipse-rseUpgrade eclipse-callgraphUpgrade eclipse-birtUpgrade eclipse-gef-examplesUpgrade eclipse-gefUpgrade eclipse-emf-xsdUpgrade eclipse-emf-xsd-sdkUpgrade jetty-eclipseUpgrade eclipse-rcpUpgrade eclipse-platformUpgrade eclipse-mylyn-tracUpgrade eclipse-cdt-parsersUpgrade eclipse-valgrindUpgrade eclipse-dtpUpgrade eclipse-swtUpgrade eclipse-changelogUpgrade eclipse-mylynUpgrade eclipse-cdtUpgrade icu4j-eclipseUpgrade eclipse-cdt-sdkUpgrade objectweb-asm-javadocUpgrade objectweb-asmUpgrade eclipse-mylyn-wikitextUpgrade eclipse-mylyn-pdeUpgrade eclipse-gef-sdk | Oct 16, 2024 | Jan 13, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 16, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub