CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-17091

faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.066

EPSS Ranking 90.7%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2019-17091

Eclipse » Mojarra » Version: 2.3.0

cpe:2.3:a:eclipse:mojarra:2.3.0
Eclipse » Mojarra » Version: 2.3.1

cpe:2.3:a:eclipse:mojarra:2.3.1
Eclipse » Mojarra » Version: 2.3.2

cpe:2.3:a:eclipse:mojarra:2.3.2
Eclipse » Mojarra » Version: 2.3.3

cpe:2.3:a:eclipse:mojarra:2.3.3
Eclipse » Mojarra » Version: 2.3.3.99

cpe:2.3:a:eclipse:mojarra:2.3.3.99
Eclipse » Mojarra » Version: 2.3.4

cpe:2.3:a:eclipse:mojarra:2.3.4
Eclipse » Mojarra » Version: 2.3.5

cpe:2.3:a:eclipse:mojarra:2.3.5
Eclipse » Mojarra » Version: 2.3.6

cpe:2.3:a:eclipse:mojarra:2.3.6
Eclipse » Mojarra » Version: 2.3.7

cpe:2.3:a:eclipse:mojarra:2.3.7
Eclipse » Mojarra » Version: 2.3.8

cpe:2.3:a:eclipse:mojarra:2.3.8
Eclipse » Mojarra » Version: 2.3.9

cpe:2.3:a:eclipse:mojarra:2.3.9
Oracle » Application Testing Suite » Version: 13.2.0.1

cpe:2.3:a:oracle:application_testing_suite:13.2.0.1
Oracle » Application Testing Suite » Version: 13.3.0.1

cpe:2.3:a:oracle:application_testing_suite:13.3.0.1
Oracle » Banking Enterprise Product Manufacturing » Version: 2.7.0

cpe:2.3:a:oracle:banking_enterprise_product_manufacturing:2.7.0
Oracle » Banking Enterprise Product Manufacturing » Version: 2.8.0

cpe:2.3:a:oracle:banking_enterprise_product_manufacturing:2.8.0
Oracle » Communications Diameter Signaling Router » Version: 8.0.0.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0.0
Oracle » Communications Diameter Signaling Router » Version: 8.1

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1
Oracle » Communications Diameter Signaling Router » Version: 8.2

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2
Oracle » Communications Diameter Signaling Router » Version: 8.2.1

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1
Oracle » Communications Diameter Signaling Router » Version: 8.2.2

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.2
Oracle » Communications Diameter Signaling Router » Version: 8.3

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3
Oracle » Communications Diameter Signaling Router » Version: 8.3.0.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3.0.0
Oracle » Communications Diameter Signaling Router » Version: 8.4

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4
Oracle » Communications Diameter Signaling Router » Version: 8.4.0.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4.0.0
Oracle » Communications Diameter Signaling Router » Version: 8.4.0.5

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4.0.5
Oracle » Communications Network Integrity » Version: 7.3.5

cpe:2.3:a:oracle:communications_network_integrity:7.3.5
Oracle » Communications Network Integrity » Version: 7.3.6

cpe:2.3:a:oracle:communications_network_integrity:7.3.6
Oracle » Communications Unified Inventory Management » Version: 7.3.0

cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.0
Oracle » Communications Unified Inventory Management » Version: 7.4.0

cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0
Oracle » Enterprise Data Quality » Version: 12.2.1.3.0

cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.3.0
Oracle » Health Sciences Information Manager » Version: 3.0

cpe:2.3:a:oracle:health_sciences_information_manager:3.0
Oracle » Healthcare Data Repository » Version: 7.0

cpe:2.3:a:oracle:healthcare_data_repository:7.0
Oracle » Mojarra Javaserver Faces » Version: 2.2.0

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.0
Oracle » Mojarra Javaserver Faces » Version: 2.2.1

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.1
Oracle » Mojarra Javaserver Faces » Version: 2.2.10

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.10
Oracle » Mojarra Javaserver Faces » Version: 2.2.11

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.11
Oracle » Mojarra Javaserver Faces » Version: 2.2.12

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.12
Oracle » Mojarra Javaserver Faces » Version: 2.2.13

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.13
Oracle » Mojarra Javaserver Faces » Version: 2.2.14

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.14
Oracle » Mojarra Javaserver Faces » Version: 2.2.15

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.15
Oracle » Mojarra Javaserver Faces » Version: 2.2.16

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.16
Oracle » Mojarra Javaserver Faces » Version: 2.2.17

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.17
Oracle » Mojarra Javaserver Faces » Version: 2.2.18

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.18
Oracle » Mojarra Javaserver Faces » Version: 2.2.19

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.19
Oracle » Mojarra Javaserver Faces » Version: 2.2.2

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.2
Oracle » Mojarra Javaserver Faces » Version: 2.2.3

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.3
Oracle » Mojarra Javaserver Faces » Version: 2.2.4

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.4
Oracle » Mojarra Javaserver Faces » Version: 2.2.5

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.5
Oracle » Mojarra Javaserver Faces » Version: 2.2.6

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.6
Oracle » Mojarra Javaserver Faces » Version: 2.2.7

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.7
Oracle » Mojarra Javaserver Faces » Version: 2.2.8

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.8
Oracle » Mojarra Javaserver Faces » Version: 2.2.9

cpe:2.3:a:oracle:mojarra_javaserver_faces:2.2.9
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 15.1.0.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1.0.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 15.2

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 15.2.18

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2.18
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 15.2.18.7

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2.18.7
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 16.1.0.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1.0.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 16.2

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 16.2.0.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2.0.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 16.2.18

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2.18
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 16.2.19.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2.19.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.1.0.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.1.0.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.10

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.10
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.11

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.11
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.12

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.12
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.12.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.12.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.12.0.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.12.0.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.12.1

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.12.1
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.12.12

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.12.12
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.12.14

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.12.14
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.12.15.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.12.15.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.12.4

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.12.4
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.2

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.2
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.2.16.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.2.16.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.3

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.3
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.4

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.4
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.5

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.5
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.6

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.6
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.7

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.7
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.8

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.8
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.9

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.9
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 18.1.0.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:18.1.0.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 18.8

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:18.8
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 18.8.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:18.8.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 18.8.0.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:18.8.0.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 18.8.11

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:18.8.11
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 18.8.15.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:18.8.15.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 19.12.0.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:19.12.0.0
Oracle » Rapid Planning » Version: 12.1

cpe:2.3:a:oracle:rapid_planning:12.1
Oracle » Rapid Planning » Version: 12.2

cpe:2.3:a:oracle:rapid_planning:12.2
Oracle » Retail Advanced Inventory Planning » Version: 15.0

cpe:2.3:a:oracle:retail_advanced_inventory_planning:15.0
Oracle » Retail Advanced Inventory Planning » Version: 16.0

cpe:2.3:a:oracle:retail_advanced_inventory_planning:16.0
Oracle » Retail Assortment Planning » Version: 16.0.3

cpe:2.3:a:oracle:retail_assortment_planning:16.0.3
Oracle » Retail Bulk Data Integration » Version: 16.0.3.0

cpe:2.3:a:oracle:retail_bulk_data_integration:16.0.3.0
Oracle » Retail Financial Integration » Version: 15.0

cpe:2.3:a:oracle:retail_financial_integration:15.0
Oracle » Retail Financial Integration » Version: 16.0

cpe:2.3:a:oracle:retail_financial_integration:16.0
Oracle » Retail Integration Bus » Version: 15.0

cpe:2.3:a:oracle:retail_integration_bus:15.0
Oracle » Retail Integration Bus » Version: 16.0

cpe:2.3:a:oracle:retail_integration_bus:16.0
Oracle » Retail Invoice Matching » Version: 16.0

cpe:2.3:a:oracle:retail_invoice_matching:16.0
Oracle » Retail Merchandising System » Version: 16.0

cpe:2.3:a:oracle:retail_merchandising_system:16.0
Oracle » Retail Service Backbone » Version: 15.0

cpe:2.3:a:oracle:retail_service_backbone:15.0
Oracle » Retail Service Backbone » Version: 16.0

cpe:2.3:a:oracle:retail_service_backbone:16.0
Oracle » Retail Store Inventory Management » Version: 14.0.4

cpe:2.3:a:oracle:retail_store_inventory_management:14.0.4
Oracle » Retail Store Inventory Management » Version: 14.1.3

cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3
Oracle » Retail Store Inventory Management » Version: 15.0.3

cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3
Oracle » Retail Store Inventory Management » Version: 16.0.3

cpe:2.3:a:oracle:retail_store_inventory_management:16.0.3
Oracle » Secure Global Desktop » Version: 5.4

cpe:2.3:a:oracle:secure_global_desktop:5.4
Oracle » Secure Global Desktop » Version: 5.5

cpe:2.3:a:oracle:secure_global_desktop:5.5
Oracle » Time And Labor » Version: 12.2.11

cpe:2.3:a:oracle:time_and_labor:12.2.11
Oracle » Time And Labor » Version: 12.2.6

cpe:2.3:a:oracle:time_and_labor:12.2.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-17091

Products

Pricing

Contact Us