CVE-2019-11776

6.1 mediumEPSS 0.9%

Medium (6.1) in eclipse business intelligence and reporting tools. EPSS 0.9% chance of exploitation in the next 30 days.

In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2019-08-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

eclipse:business_intelligence_and_reporting_tools

References

https://bugs.eclipse.org/bugs/show_bug.cgi?id=546816
https://bugs.eclipse.org/bugs/show_bug.cgi?id=546816

Check your stack JSON