What the vulnerability does

01Description

In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context.

Key dates

02Disclosure timeline

August 9, 2019 CVE published
August 4, 2024 Record updated

Related vulnerabilities

04Related CVE