Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
eclipse mojarra vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2018-14371
The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra prior to 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.
Eclipse Mojarra
4.3
CVSSv2
CVE-2020-6950
Directory traversal in Eclipse Mojarra prior to 2.3.14 allows malicious users to read arbitrary files via the loc parameter or con parameter.
Eclipse Mojarra
Oracle Solaris Cluster 4.0
Oracle Banking Platform 2.6.2
Oracle Banking Platform 2.7.1
Oracle Banking Platform 2.9.0
Oracle Communications Network Integrity 7.3.6
Oracle Communications Pricing Design Center 12.0.0.3.0
Oracle Banking Platform 2.12.0
Oracle Banking Enterprise Default Management 2.12.0
Oracle Banking Enterprise Default Management 2.10.0
Oracle Retail Merchandising System 19.0.1
Oracle Hyperion Calculation Manager
Oracle Time And Labor
4.3
CVSSv2
CVE-2019-17091
faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J prior to 2.3.10 and Mojarra JavaServer Faces prior to 2.2.20, allows Reflected XSS because a client window field is mishandled.
Eclipse Mojarra
Oracle Mojarra Javaserver Faces
Oracle Application Testing Suite 13.2.0.1
Oracle Application Testing Suite 13.3.0.1
Oracle Banking Enterprise Product Manufacturing 2.7.0
Oracle Banking Enterprise Product Manufacturing 2.8.0
Oracle Communications Diameter Signaling Router
Oracle Communications Network Integrity 7.3.5
Oracle Communications Network Integrity 7.3.6
Oracle Communications Unified Inventory Management 7.3.0
Oracle Communications Unified Inventory Management 7.4.0
Oracle Enterprise Data Quality 12.2.1.3.0
Oracle Health Sciences Information Manager 3.0
Oracle Healthcare Data Repository 7.0
Oracle Primavera P6 Enterprise Project Portfolio Management
Oracle Primavera P6 Enterprise Project Portfolio Management 19.12.0.0
Oracle Rapid Planning 12.1
Oracle Rapid Planning 12.2
Oracle Retail Advanced Inventory Planning 15.0
Oracle Retail Advanced Inventory Planning 16.0
Oracle Retail Assortment Planning 16.0.3
Oracle Retail Bulk Data Integration 16.0.3.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started