VYPR
Medium severity6.1NVD Advisory· Published Oct 2, 2019· Updated Jun 17, 2026

CVE-2019-17091

CVE-2019-17091

Description

faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.glassfish:javax.facesMaven
< 2.2.202.2.20
org.glassfish:jakarta.facesMaven
< 2.3.102.3.10

Affected products

40

Patches

Vulnerability mechanics

References

18

News mentions

0

No linked articles in our index yet.