| Package | Affected versions | Patched versions |
|---|---|---|
| org.glassfish:mojarra-parent | < 2.3.14 | 2.3.14 |
| mojarra | < 2.3.14 | 2.3.14 |
| banking enterprise default management | = 2.10.0= 2.12.0 | |
| banking platform | = 2.12.0= 2.6.2= 2.7.1= 2.9.0 | |
| communications network integrity | = 7.3.6 | |
| communications pricing design center | = 12.0.0.3.0 | |
| hyperion calculation manager | < 11.2.8.0 | 11.2.8.0 |
| retail merchandising system | = 19.0.1 | |
| solaris cluster | = 4.0 | |
| time and labor | ≥ 12.2.6, ≤ 12.2.11 |
Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free