● CVE — Medium
CVE-2019-17091
Vendororacle, eclipseProductcommunications unified inventory management, retail merchandising system, communications diameter signaling router, secure global desktop, rapid planning, application testing suite, health sciences information manager, retail integration bus, primavera p6 enterprise project portfolio management, communications network integrity, retail assortment planning, retail advanced inventory planning, retail service backbone, enterprise data quality, banking enterprise product manufacturing, retail store inventory management, mojarra, healthcare data repository, mojarra javaserver faces, retail bulk data integration, retail financial integration, retail invoice matching, time and laborDiscoveredOct 2, 2019UpdatedNov 21, 2024
faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled.