Skip to content
OpenAdvisories

Package · Ubuntu

mojarra

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-120421

    Reflected XSS via client window id in URL client window mode

    In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0.0-M11, when URL client window mode is enabled (`jakarta.faces.CLIENT_WINDOW_MODE=url`), the client window id from the `jfwid` or `jakarta.faces.ClientWindow` requ…

    Eclipse Foundation Eclipse Mojarra mojarra mojarra Debian Ubuntu