Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe
Filtered by product Mojarra Javaserver Faces
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-17091 2 Eclipse, Oracle 23 Mojarra, Application Testing Suite, Banking Enterprise Product Manufacturing and 20 more 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled.