Every CVE Search/ Get API key

CVE-2010-4647

Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the...

4.3 MediumPublic exploitFix available

Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.

Exploit likelihood

5.71%Up 0.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.

Record
CVE-2010-4647
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.

Record
CVE-2010-4647
Updated
2026-11-02
EUVDEUVD-2010-4612 No score

Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.

Record
EUVD-2010-4612
Updated
2026-11-03
GitHub AdvisoriesGHSA-2q22-9jhj-hx5g No score

Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the...

Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.

Record
GHSA-2q22-9jhj-hx5g
Weakness
CWE-79
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
eclipse-cdt
Red Hat:enterprise_linux:6::server
 before 1:7.0.1-4.el6
1:7.0.1-4.el6
eclipse-cdt-parsers
Red Hat:enterprise_linux:6::server
 before 1:7.0.1-4.el6
1:7.0.1-4.el6
eclipse-cdt-sdk
Red Hat:enterprise_linux:6::server
 before 1:7.0.1-4.el6
1:7.0.1-4.el6
eclipse-emf
Red Hat:enterprise_linux:6::server
 before 0:2.6.0-1.el6
0:2.6.0-1.el6
eclipse-emf-examples
Red Hat:enterprise_linux:6::server
 before 0:2.6.0-1.el6
0:2.6.0-1.el6
eclipse-emf-sdk
Red Hat:enterprise_linux:6::server
 before 0:2.6.0-1.el6
0:2.6.0-1.el6
eclipse-emf-xsd
Red Hat:enterprise_linux:6::server
 before 0:2.6.0-1.el6
0:2.6.0-1.el6
eclipse-emf-xsd-sdk
Red Hat:enterprise_linux:6::server
 before 0:2.6.0-1.el6
0:2.6.0-1.el6
eclipse-gef
Red Hat:enterprise_linux:6::server
 before 0:3.6.1-3.el6
0:3.6.1-3.el6
eclipse-gef-examples
Red Hat:enterprise_linux:6::server
 before 0:3.6.1-3.el6
0:3.6.1-3.el6
Show 72 moreShow less
Affected packages
PackageAffectedFixed
eclipse-gef-sdk
Red Hat:enterprise_linux:6::server
 before 0:3.6.1-3.el6
0:3.6.1-3.el6
icu4j
Red Hat:enterprise_linux:6::server
 before 1:4.2.1-5.el6
1:4.2.1-5.el6
icu4j-javadoc
Red Hat:enterprise_linux:6::server
 before 1:4.2.1-5.el6
1:4.2.1-5.el6
objectweb-asm
Red Hat:enterprise_linux:6::server
 before 0:3.2-2.1.el6
0:3.2-2.1.el6
objectweb-asm-javadoc
Red Hat:enterprise_linux:6::server
 before 0:3.2-2.1.el6
0:3.2-2.1.el6
eclipse
Red Hat:enterprise_linux:6::server
 before 1:3.6.1-6.13.el6
1:3.6.1-6.13.el6
eclipse-birt
Red Hat:enterprise_linux:6::server
 before 0:2.6.0-1.1.el6
0:2.6.0-1.1.el6
eclipse-callgraph
Red Hat:enterprise_linux:6::server
 before 0:0.6.1-1.el6
0:0.6.1-1.el6
eclipse-changelog
Red Hat:enterprise_linux:6::server
 before 1:2.7.0-1.el6
1:2.7.0-1.el6
eclipse-debuginfo
Red Hat:enterprise_linux:6::server
 before 1:3.6.1-6.13.el6
1:3.6.1-6.13.el6
eclipse-dtp
Red Hat:enterprise_linux:6::server
 before 0:1.8.1-1.1.el6
0:1.8.1-1.1.el6
eclipse-jdt
Red Hat:enterprise_linux:6::server
 before 1:3.6.1-6.13.el6
1:3.6.1-6.13.el6
eclipse-linuxprofilingframework
Red Hat:enterprise_linux:6::server
 before 0:0.6.1-1.el6
0:0.6.1-1.el6
eclipse-mylyn
Red Hat:enterprise_linux:6::server
 before 0:3.4.2-9.el6
0:3.4.2-9.el6
eclipse-mylyn-cdt
Red Hat:enterprise_linux:6::server
 before 0:3.4.2-9.el6
0:3.4.2-9.el6
eclipse-mylyn-java
Red Hat:enterprise_linux:6::server
 before 0:3.4.2-9.el6
0:3.4.2-9.el6
eclipse-mylyn-pde
Red Hat:enterprise_linux:6::server
 before 0:3.4.2-9.el6
0:3.4.2-9.el6
eclipse-mylyn-trac
Red Hat:enterprise_linux:6::server
 before 0:3.4.2-9.el6
0:3.4.2-9.el6
eclipse-mylyn-webtasks
Red Hat:enterprise_linux:6::server
 before 0:3.4.2-9.el6
0:3.4.2-9.el6
eclipse-mylyn-wikitext
Red Hat:enterprise_linux:6::server
 before 0:3.4.2-9.el6
0:3.4.2-9.el6
eclipse-oprofile
Red Hat:enterprise_linux:6::server
 before 0:0.6.1-1.el6
0:0.6.1-1.el6
eclipse-oprofile-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:0.6.1-1.el6
0:0.6.1-1.el6
eclipse-pde
Red Hat:enterprise_linux:6::server
 before 1:3.6.1-6.13.el6
1:3.6.1-6.13.el6
eclipse-platform
Red Hat:enterprise_linux:6::server
 before 1:3.6.1-6.13.el6
1:3.6.1-6.13.el6
eclipse-rcp
Red Hat:enterprise_linux:6::server
 before 1:3.6.1-6.13.el6
1:3.6.1-6.13.el6
eclipse-rse
Red Hat:enterprise_linux:6::server
 before 0:3.2-1.el6
0:3.2-1.el6
eclipse-swt
Red Hat:enterprise_linux:6::server
 before 1:3.6.1-6.13.el6
1:3.6.1-6.13.el6
eclipse-valgrind
Red Hat:enterprise_linux:6::server
 before 0:0.6.1-1.el6
0:0.6.1-1.el6
icu4j-eclipse
Red Hat:enterprise_linux:6::server
 before 1:4.2.1-5.el6
1:4.2.1-5.el6
jetty-eclipse
Red Hat:enterprise_linux:6::server
 before 0:6.1.24-2.el6
0:6.1.24-2.el6
sat4j
Red Hat:enterprise_linux:6::server
 before 0:2.2.0-4.0.el6
0:2.2.0-4.0.el6
eclipse-cdt
Red Hat:enterprise_linux:6::workstation
 before 1:7.0.1-4.el6
1:7.0.1-4.el6
eclipse-cdt-parsers
Red Hat:enterprise_linux:6::workstation
 before 1:7.0.1-4.el6
1:7.0.1-4.el6
eclipse-cdt-sdk
Red Hat:enterprise_linux:6::workstation
 before 1:7.0.1-4.el6
1:7.0.1-4.el6
eclipse-emf
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.0-1.el6
0:2.6.0-1.el6
eclipse-emf-examples
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.0-1.el6
0:2.6.0-1.el6
eclipse-emf-sdk
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.0-1.el6
0:2.6.0-1.el6
eclipse-emf-xsd
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.0-1.el6
0:2.6.0-1.el6
eclipse-emf-xsd-sdk
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.0-1.el6
0:2.6.0-1.el6
eclipse-gef
Red Hat:enterprise_linux:6::workstation
 before 0:3.6.1-3.el6
0:3.6.1-3.el6
eclipse-gef-examples
Red Hat:enterprise_linux:6::workstation
 before 0:3.6.1-3.el6
0:3.6.1-3.el6
eclipse-gef-sdk
Red Hat:enterprise_linux:6::workstation
 before 0:3.6.1-3.el6
0:3.6.1-3.el6
icu4j
Red Hat:enterprise_linux:6::workstation
 before 1:4.2.1-5.el6
1:4.2.1-5.el6
icu4j-javadoc
Red Hat:enterprise_linux:6::workstation
 before 1:4.2.1-5.el6
1:4.2.1-5.el6
objectweb-asm
Red Hat:enterprise_linux:6::workstation
 before 0:3.2-2.1.el6
0:3.2-2.1.el6
objectweb-asm-javadoc
Red Hat:enterprise_linux:6::workstation
 before 0:3.2-2.1.el6
0:3.2-2.1.el6
eclipse
Red Hat:enterprise_linux:6::workstation
 before 1:3.6.1-6.13.el6
1:3.6.1-6.13.el6
eclipse-birt
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.0-1.1.el6
0:2.6.0-1.1.el6
eclipse-callgraph
Red Hat:enterprise_linux:6::workstation
 before 0:0.6.1-1.el6
0:0.6.1-1.el6
eclipse-changelog
Red Hat:enterprise_linux:6::workstation
 before 1:2.7.0-1.el6
1:2.7.0-1.el6
eclipse-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 1:3.6.1-6.13.el6
1:3.6.1-6.13.el6
eclipse-dtp
Red Hat:enterprise_linux:6::workstation
 before 0:1.8.1-1.1.el6
0:1.8.1-1.1.el6
eclipse-jdt
Red Hat:enterprise_linux:6::workstation
 before 1:3.6.1-6.13.el6
1:3.6.1-6.13.el6
eclipse-linuxprofilingframework
Red Hat:enterprise_linux:6::workstation
 before 0:0.6.1-1.el6
0:0.6.1-1.el6
eclipse-mylyn
Red Hat:enterprise_linux:6::workstation
 before 0:3.4.2-9.el6
0:3.4.2-9.el6
eclipse-mylyn-cdt
Red Hat:enterprise_linux:6::workstation
 before 0:3.4.2-9.el6
0:3.4.2-9.el6
eclipse-mylyn-java
Red Hat:enterprise_linux:6::workstation
 before 0:3.4.2-9.el6
0:3.4.2-9.el6
eclipse-mylyn-pde
Red Hat:enterprise_linux:6::workstation
 before 0:3.4.2-9.el6
0:3.4.2-9.el6
eclipse-mylyn-trac
Red Hat:enterprise_linux:6::workstation
 before 0:3.4.2-9.el6
0:3.4.2-9.el6
eclipse-mylyn-webtasks
Red Hat:enterprise_linux:6::workstation
 before 0:3.4.2-9.el6
0:3.4.2-9.el6
eclipse-mylyn-wikitext
Red Hat:enterprise_linux:6::workstation
 before 0:3.4.2-9.el6
0:3.4.2-9.el6
eclipse-oprofile
Red Hat:enterprise_linux:6::workstation
 before 0:0.6.1-1.el6
0:0.6.1-1.el6
eclipse-oprofile-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:0.6.1-1.el6
0:0.6.1-1.el6
eclipse-pde
Red Hat:enterprise_linux:6::workstation
 before 1:3.6.1-6.13.el6
1:3.6.1-6.13.el6
eclipse-platform
Red Hat:enterprise_linux:6::workstation
 before 1:3.6.1-6.13.el6
1:3.6.1-6.13.el6
eclipse-rcp
Red Hat:enterprise_linux:6::workstation
 before 1:3.6.1-6.13.el6
1:3.6.1-6.13.el6
eclipse-rse
Red Hat:enterprise_linux:6::workstation
 before 0:3.2-1.el6
0:3.2-1.el6
eclipse-swt
Red Hat:enterprise_linux:6::workstation
 before 1:3.6.1-6.13.el6
1:3.6.1-6.13.el6
eclipse-valgrind
Red Hat:enterprise_linux:6::workstation
 before 0:0.6.1-1.el6
0:0.6.1-1.el6
icu4j-eclipse
Red Hat:enterprise_linux:6::workstation
 before 1:4.2.1-5.el6
1:4.2.1-5.el6
jetty-eclipse
Red Hat:enterprise_linux:6::workstation
 before 0:6.1.24-2.el6
0:6.1.24-2.el6
sat4j
Red Hat:enterprise_linux:6::workstation
 before 0:2.2.0-4.0.el6
0:2.2.0-4.0.el6

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBEclipse 3.6.1 - Help Server 'help/index.jsp' Cross-Site Scripting2010-11-16
Exploit-DBEclipse 3.6.1 - Help Server 'help/advanced/content.jsp' Cross-Site Scripting2010-11-16

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-4647 is a medium vulnerability (CVSS 4.3) in Eclipse Ide, published January 13, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.71%, the 93rd percentile. Fixed in eclipse-cdt 1:7.0.1-4.el6.

References

Show 35 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open