{"id":"CVE-2010-4647","aliases":["EUVD-2010-4612","GHSA-2q22-9jhj-hx5g","RHSA-2011:0568"],"status":"published","title":"Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the...","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.05706,"percentile":0.93073,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-79"],"published":"2011-01-13T18:35:00Z","modified":"2026-06-26T12:21:34Z","exploits":[{"source":"exploitdb","id":"EDB-34998","title":"Eclipse 3.6.1 - Help Server 'help/index.jsp' Cross-Site Scripting","type":"remote","platform":"linux","date":"2010-11-16","verified":true,"url":"https://www.exploit-db.com/exploits/34998"},{"source":"exploitdb","id":"EDB-34999","title":"Eclipse 3.6.1 - Help Server 'help/advanced/content.jsp' Cross-Site Scripting","type":"remote","platform":"linux","date":"2010-11-16","verified":true,"url":"https://www.exploit-db.com/exploits/34999"}],"fixes":[{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-cdt","fixed_in":["1:7.0.1-4.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-cdt-parsers","fixed_in":["1:7.0.1-4.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-cdt-sdk","fixed_in":["1:7.0.1-4.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-emf","fixed_in":["0:2.6.0-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-emf-examples","fixed_in":["0:2.6.0-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-emf-sdk","fixed_in":["0:2.6.0-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-emf-xsd","fixed_in":["0:2.6.0-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-emf-xsd-sdk","fixed_in":["0:2.6.0-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-gef","fixed_in":["0:3.6.1-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-gef-examples","fixed_in":["0:3.6.1-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-gef-sdk","fixed_in":["0:3.6.1-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"icu4j","fixed_in":["1:4.2.1-5.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"icu4j-javadoc","fixed_in":["1:4.2.1-5.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"objectweb-asm","fixed_in":["0:3.2-2.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"objectweb-asm-javadoc","fixed_in":["0:3.2-2.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse","fixed_in":["1:3.6.1-6.13.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-birt","fixed_in":["0:2.6.0-1.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-callgraph","fixed_in":["0:0.6.1-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-changelog","fixed_in":["1:2.7.0-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-debuginfo","fixed_in":["1:3.6.1-6.13.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-dtp","fixed_in":["0:1.8.1-1.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-jdt","fixed_in":["1:3.6.1-6.13.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-linuxprofilingframework","fixed_in":["0:0.6.1-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-mylyn","fixed_in":["0:3.4.2-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-mylyn-cdt","fixed_in":["0:3.4.2-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-mylyn-java","fixed_in":["0:3.4.2-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-mylyn-pde","fixed_in":["0:3.4.2-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-mylyn-trac","fixed_in":["0:3.4.2-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-mylyn-webtasks","fixed_in":["0:3.4.2-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-mylyn-wikitext","fixed_in":["0:3.4.2-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-oprofile","fixed_in":["0:0.6.1-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-oprofile-debuginfo","fixed_in":["0:0.6.1-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-pde","fixed_in":["1:3.6.1-6.13.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-platform","fixed_in":["1:3.6.1-6.13.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-rcp","fixed_in":["1:3.6.1-6.13.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-rse","fixed_in":["0:3.2-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-swt","fixed_in":["1:3.6.1-6.13.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-valgrind","fixed_in":["0:0.6.1-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"icu4j-eclipse","fixed_in":["1:4.2.1-5.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"jetty-eclipse","fixed_in":["0:6.1.24-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"sat4j","fixed_in":["0:2.2.0-4.0.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-cdt","fixed_in":["1:7.0.1-4.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-cdt-parsers","fixed_in":["1:7.0.1-4.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-cdt-sdk","fixed_in":["1:7.0.1-4.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-emf","fixed_in":["0:2.6.0-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-emf-examples","fixed_in":["0:2.6.0-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-emf-sdk","fixed_in":["0:2.6.0-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-emf-xsd","fixed_in":["0:2.6.0-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-emf-xsd-sdk","fixed_in":["0:2.6.0-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-gef","fixed_in":["0:3.6.1-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-gef-examples","fixed_in":["0:3.6.1-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-gef-sdk","fixed_in":["0:3.6.1-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"icu4j","fixed_in":["1:4.2.1-5.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"icu4j-javadoc","fixed_in":["1:4.2.1-5.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"objectweb-asm","fixed_in":["0:3.2-2.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"objectweb-asm-javadoc","fixed_in":["0:3.2-2.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse","fixed_in":["1:3.6.1-6.13.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-birt","fixed_in":["0:2.6.0-1.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-callgraph","fixed_in":["0:0.6.1-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-changelog","fixed_in":["1:2.7.0-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-debuginfo","fixed_in":["1:3.6.1-6.13.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-dtp","fixed_in":["0:1.8.1-1.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-jdt","fixed_in":["1:3.6.1-6.13.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-linuxprofilingframework","fixed_in":["0:0.6.1-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-mylyn","fixed_in":["0:3.4.2-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-mylyn-cdt","fixed_in":["0:3.4.2-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-mylyn-java","fixed_in":["0:3.4.2-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-mylyn-pde","fixed_in":["0:3.4.2-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-mylyn-trac","fixed_in":["0:3.4.2-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-mylyn-webtasks","fixed_in":["0:3.4.2-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-mylyn-wikitext","fixed_in":["0:3.4.2-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-oprofile","fixed_in":["0:0.6.1-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-oprofile-debuginfo","fixed_in":["0:0.6.1-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-pde","fixed_in":["1:3.6.1-6.13.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-platform","fixed_in":["1:3.6.1-6.13.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-rcp","fixed_in":["1:3.6.1-6.13.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-rse","fixed_in":["0:3.2-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-swt","fixed_in":["1:3.6.1-6.13.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-valgrind","fixed_in":["0:0.6.1-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"icu4j-eclipse","fixed_in":["1:4.2.1-5.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"jetty-eclipse","fixed_in":["0:6.1.24-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sat4j","fixed_in":["0:2.2.0-4.0.el6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-cdt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-4.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-cdt-parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-4.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-cdt-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-4.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-emf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-emf-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-emf-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-emf-xsd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-emf-xsd-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-gef","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-gef-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-gef-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"icu4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.1-5.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"icu4j-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.1-5.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-2.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"objectweb-asm-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-2.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.1-6.13.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-birt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-1.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-callgraph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-changelog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.0-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.1-6.13.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-dtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-1.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-jdt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.1-6.13.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-linuxprofilingframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-mylyn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-mylyn-cdt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-mylyn-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-mylyn-pde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-mylyn-trac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-mylyn-webtasks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-mylyn-wikitext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-oprofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-oprofile-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-pde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.1-6.13.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-platform","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.1-6.13.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-rcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.1-6.13.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-rse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-swt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.1-6.13.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"eclipse-valgrind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"icu4j-eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.1-5.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"jetty-eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.24-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"sat4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-4.0.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-cdt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-4.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-cdt-parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-4.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-cdt-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-4.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-emf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-emf-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-emf-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-emf-xsd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-emf-xsd-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-gef","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-gef-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-gef-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"icu4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.1-5.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"icu4j-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.1-5.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-2.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"objectweb-asm-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-2.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.1-6.13.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-birt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-1.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-callgraph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-changelog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.0-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.1-6.13.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-dtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-1.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-jdt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.1-6.13.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-linuxprofilingframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-mylyn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-mylyn-cdt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-mylyn-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-mylyn-pde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-mylyn-trac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-mylyn-webtasks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-mylyn-wikitext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-oprofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-oprofile-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-pde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.1-6.13.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-platform","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.1-6.13.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-rcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.1-6.13.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-rse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-swt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.1-6.13.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"eclipse-valgrind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"icu4j-eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.1-5.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"jetty-eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.24-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sat4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-4.0.el6"}]}]}],"products":[{"vendor":"eclipse","product":"eclipse_ide"}],"references":[{"url":"http://openwall.com/lists/oss-security/2011/01/06/16","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0568.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://openwall.com/lists/oss-security/2011/01/06/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052532.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:032","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052554.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://yehg.net/lab/pr0js/advisories/eclipse/%5Beclipse_help_server%5D_cross_site_scripting","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64833","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://bugs.eclipse.org/bugs/show_bug.cgi?id=329582","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4647","tags":["advisory"]},{"url":"http://yehg.net/lab/pr0js/advisories/eclipse/[eclipse_help_server]_cross_site_scripting"},{"url":"https://access.redhat.com/errata/RHSA-2011:0568","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-4647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=661901","tags":["report"]},{"url":"https://github.com/advisories/GHSA-2q22-9jhj-hx5g"},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=622713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=622867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=656329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=656333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=656337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=656338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=656342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=656344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=656347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=656391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=656397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=661842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=661845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=664019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=668890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=669460","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=669461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=669462","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=669499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=669819","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=670228","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=673174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=678364","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0568.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4647","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2010-4647","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.","status":"published","published":"2011-01-13T18:35:00Z","modified":"2024-08-07T03:51:17.969Z","updated_at":"2026-11-02T14:33:28.858903Z"}],"euvd":[{"id":"EUVD-2010-4612","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.","status":"published","published":"2011-01-13T18:35:00Z","modified":"2024-08-07T03:51:17Z","updated_at":"2026-11-03T01:39:29.508356Z"}],"ghsa":[{"id":"GHSA-2q22-9jhj-hx5g","title":"Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the...","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.","status":"published","published":"2022-05-14T03:08:11Z","modified":"2023-02-10T05:06:15Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:54:01.286462Z"}],"nvd":[{"id":"CVE-2010-4647","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.","status":"published","published":"2011-01-13T19:00:04.917Z","modified":"2026-06-16T23:25:14.53Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:02:03.297831Z"}],"osv":[{"id":"RHSA-2011:0568","title":"Red Hat Security Advisory: eclipse security, bug fix, and enhancement update","status":"published","published":"2024-09-15T18:55:08Z","modified":"2026-06-26T12:21:34.064282806Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}