CVE-2010-4647 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2010-4647

Deferred

More Info Official Page

Source-secalert@redhat.com

Published At-13 Jan, 2011 | 19:00

Updated At-11 Apr, 2025 | 00:51

Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

Eclipse Foundation AISBL

>>eclipse_ide>>Versions up to 3.6.1(inclusive)

cpe:2.3:a:eclipse:eclipse_ide:*:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>1.0

cpe:2.3:a:eclipse:eclipse_ide:1.0:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>2.0

cpe:2.3:a:eclipse:eclipse_ide:2.0:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>2.0.1

cpe:2.3:a:eclipse:eclipse_ide:2.0.1:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>2.0.2

cpe:2.3:a:eclipse:eclipse_ide:2.0.2:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>2.1

cpe:2.3:a:eclipse:eclipse_ide:2.1:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>2.1.1

cpe:2.3:a:eclipse:eclipse_ide:2.1.1:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>2.1.2

cpe:2.3:a:eclipse:eclipse_ide:2.1.2:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>2.1.3

cpe:2.3:a:eclipse:eclipse_ide:2.1.3:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.0

cpe:2.3:a:eclipse:eclipse_ide:3.0:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.0.1

cpe:2.3:a:eclipse:eclipse_ide:3.0.1:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.0.2

cpe:2.3:a:eclipse:eclipse_ide:3.0.2:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.1

cpe:2.3:a:eclipse:eclipse_ide:3.1:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.1.1

cpe:2.3:a:eclipse:eclipse_ide:3.1.1:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.1.2

cpe:2.3:a:eclipse:eclipse_ide:3.1.2:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.2

cpe:2.3:a:eclipse:eclipse_ide:3.2:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.2.1

cpe:2.3:a:eclipse:eclipse_ide:3.2.1:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.2.2

cpe:2.3:a:eclipse:eclipse_ide:3.2.2:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.3

cpe:2.3:a:eclipse:eclipse_ide:3.3:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.3.1

cpe:2.3:a:eclipse:eclipse_ide:3.3.1:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.3.1.1

cpe:2.3:a:eclipse:eclipse_ide:3.3.1.1:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.3.2

cpe:2.3:a:eclipse:eclipse_ide:3.3.2:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.4

cpe:2.3:a:eclipse:eclipse_ide:3.4:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.4.1

cpe:2.3:a:eclipse:eclipse_ide:3.4.1:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.4.2

cpe:2.3:a:eclipse:eclipse_ide:3.4.2:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.5

cpe:2.3:a:eclipse:eclipse_ide:3.5:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.5.1

cpe:2.3:a:eclipse:eclipse_ide:3.5.1:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.5.2

cpe:2.3:a:eclipse:eclipse_ide:3.5.2:*:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.6

cpe:2.3:a:eclipse:eclipse_ide:3.6:m1:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.6

cpe:2.3:a:eclipse:eclipse_ide:3.6:m2:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.6

cpe:2.3:a:eclipse:eclipse_ide:3.6:m3:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.6

cpe:2.3:a:eclipse:eclipse_ide:3.6:m4:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.6

cpe:2.3:a:eclipse:eclipse_ide:3.6:m5:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.6

cpe:2.3:a:eclipse:eclipse_ide:3.6:m6:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.6

cpe:2.3:a:eclipse:eclipse_ide:3.6:m7:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.6

cpe:2.3:a:eclipse:eclipse_ide:3.6:rc1:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.6

cpe:2.3:a:eclipse:eclipse_ide:3.6:rc2:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.6

cpe:2.3:a:eclipse:eclipse_ide:3.6:rc3:*:*:*:*:*:*

Eclipse Foundation AISBL

>>eclipse_ide>>3.6

cpe:2.3:a:eclipse:eclipse_ide:3.6:rc4:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

CWE ID: CWE-79

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052532.html	secalert@redhat.com	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052554.html	secalert@redhat.com	N/A
http://openwall.com/lists/oss-security/2011/01/06/16	secalert@redhat.com	Exploit
http://openwall.com/lists/oss-security/2011/01/06/7	secalert@redhat.com	Exploit
http://www.mandriva.com/security/advisories?name=MDVSA-2011:032	secalert@redhat.com	N/A
http://www.redhat.com/support/errata/RHSA-2011-0568.html	secalert@redhat.com	N/A
http://yehg.net/lab/pr0js/advisories/eclipse/%5Beclipse_help_server%5D_cross_site_scripting	secalert@redhat.com	N/A
https://bugs.eclipse.org/bugs/show_bug.cgi?id=329582	secalert@redhat.com	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/64833	secalert@redhat.com	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052532.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052554.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://openwall.com/lists/oss-security/2011/01/06/16	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://openwall.com/lists/oss-security/2011/01/06/7	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://www.mandriva.com/security/advisories?name=MDVSA-2011:032	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2011-0568.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://yehg.net/lab/pr0js/advisories/eclipse/%5Beclipse_help_server%5D_cross_site_scripting	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugs.eclipse.org/bugs/show_bug.cgi?id=329582	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/64833	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052532.html

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052554.html

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://openwall.com/lists/oss-security/2011/01/06/16

Source: secalert@redhat.com

Resource:

Exploit

Hyperlink: http://openwall.com/lists/oss-security/2011/01/06/7

Source: secalert@redhat.com

Resource:

Exploit

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:032

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0568.html

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://yehg.net/lab/pr0js/advisories/eclipse/%5Beclipse_help_server%5D_cross_site_scripting

Source: secalert@redhat.com

Resource: N/A

Hyperlink: https://bugs.eclipse.org/bugs/show_bug.cgi?id=329582

Source: secalert@redhat.com

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/64833

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052532.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052554.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://openwall.com/lists/oss-security/2011/01/06/16

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Hyperlink: http://openwall.com/lists/oss-security/2011/01/06/7

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:032

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0568.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://yehg.net/lab/pr0js/advisories/eclipse/%5Beclipse_help_server%5D_cross_site_scripting

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://bugs.eclipse.org/bugs/show_bug.cgi?id=329582

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/64833

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A