Mojarra Javaserver Faces

mojarra_javaserver_faces

Vendor: Oracle • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2019-17091

2Eclipse

Oracle

23Application Testing Suite

Banking Enterprise Product ManufacturingCommunications Diameter Signaling Router+20 more

Nov 21, 2024

Oct 2, 2019

N/A· v4

6.1 MEDIUM· v3

4.3 MEDIUM· v2

faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled...Show more