The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade eclipse-rseUpgrade eclipse-callgraphUpgrade eclipse-emf-sdkUpgrade eclipse-emfUpgrade eclipse-linuxprofilingframeworkUpgrade eclipse-mylyn-webtasksUpgrade jetty-eclipseUpgrade eclipse-jdtUpgrade eclipse-mylyn-cdtUpgrade eclipse-oprofileUpgrade eclipse-emf-examplesUpgrade eclipse-gef-examplesUpgrade eclipse-emf-xsd-sdkUpgrade eclipse-mylyn-javaUpgrade icu4j-javadocUpgrade eclipse-emf-xsdUpgrade eclipse-gefUpgrade eclipse-rcpUpgrade sat4jUpgrade icu4jUpgrade eclipse-birtUpgrade eclipse-pdeUpgrade eclipse-mylynUpgrade eclipse-cdt-parsersUpgrade eclipse-dtpUpgrade eclipse-mylyn-tracUpgrade eclipse-changelogUpgrade eclipse-platformUpgrade eclipse-cdt-sdkUpgrade objectweb-asmUpgrade objectweb-asm-javadocUpgrade icu4j-eclipseUpgrade eclipse-cdtUpgrade eclipse-gef-sdkUpgrade eclipse-mylyn-pdeUpgrade eclipse-swtUpgrade eclipse-mylyn-wikitextUpgrade eclipse-valgrind | Oct 16, 2024 | Jan 13, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 16, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub