Skip to content
OpenAdvisories

Package · Debian

mojarra

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-120421

    Reflected XSS via client window id in URL client window mode

    In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0.0-M11, when URL client window mode is enabled (`jakarta.faces.CLIENT_WINDOW_MODE=url`), the client window id from the `jfwid` or `jakarta.faces.ClientWindow` requ…

    Eclipse Foundation Eclipse Mojarra mojarra mojarra Debian Ubuntu
  • Medium —
    CVE-2013-5855

    Improper Neutralization of Input During Web Page Generation in Mojarra

    Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) <h:outputText> tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attack…

    mojarra org.glassfish:javax.faces Debian Maven