Read the docs
TI-2010-04370 Aliases CVE-2010-4647GHSA-2q22-9jhj-hx5g

Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application…

Priority LOW 29CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · Partial · None
Fix status
Partial Red Hat: 4 fixed, 1 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-79.

Summary

Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.

Why it matters now

EPSS 0.05706 93rd percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Partial Red Hat: 1 advisoryRed Hat: 4 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 39

CPEVersionsRoleVendor
cpe:2.3:a:eclipse:eclipse_ide:*:*:*:*:*:*:*:*up to 3.6.1VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:1.0:*:*:*:*:*:*:*1.0VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:2.0:*:*:*:*:*:*:*2.0VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:2.0.2:*:*:*:*:*:*:*2.0.2VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:2.1:*:*:*:*:*:*:*2.1VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:2.1.1:*:*:*:*:*:*:*2.1.1VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:2.1.2:*:*:*:*:*:*:*2.1.2VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:2.1.3:*:*:*:*:*:*:*2.1.3VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.0:*:*:*:*:*:*:*3.0VulnerableEclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:*:*:*:*:*:*:*:* Versions up to 3.6.1 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:2.1.1:*:*:*:*:*:*:* Versions 2.1.1 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:2.1.2:*:*:*:*:*:*:* Versions 2.1.2 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:2.1.3:*:*:*:*:*:*:* Versions 2.1.3 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Eclipse Foundation
Show 29 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:eclipse:eclipse_ide:3.0.1:*:*:*:*:*:*:*3.0.1VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.0.2:*:*:*:*:*:*:*3.0.2VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.1:*:*:*:*:*:*:*3.1VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.1.1:*:*:*:*:*:*:*3.1.1VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.1.2:*:*:*:*:*:*:*3.1.2VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.2:*:*:*:*:*:*:*3.2VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.2.1:*:*:*:*:*:*:*3.2.1VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.2.2:*:*:*:*:*:*:*3.2.2VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.3:*:*:*:*:*:*:*3.3VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.3.1:*:*:*:*:*:*:*3.3.1VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.3.1.1:*:*:*:*:*:*:*3.3.1.1VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.3.2:*:*:*:*:*:*:*3.3.2VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.4:*:*:*:*:*:*:*3.4VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.4.1:*:*:*:*:*:*:*3.4.1VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.4.2:*:*:*:*:*:*:*3.4.2VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.5:*:*:*:*:*:*:*3.5VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.5.1:*:*:*:*:*:*:*3.5.1VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.5.2:*:*:*:*:*:*:*3.5.2VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.6:m1:*:*:*:*:*:*3.6 m1VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.6:m2:*:*:*:*:*:*3.6 m2VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.6:m3:*:*:*:*:*:*3.6 m3VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.6:m4:*:*:*:*:*:*3.6 m4VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.6:m5:*:*:*:*:*:*3.6 m5VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.6:m6:*:*:*:*:*:*3.6 m6VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.6:m7:*:*:*:*:*:*3.6 m7VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.6:rc1:*:*:*:*:*:*3.6 rc1VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.6:rc2:*:*:*:*:*:*3.6 rc2VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.6:rc3:*:*:*:*:*:*3.6 rc3VulnerableEclipse Foundation
cpe:2.3:a:eclipse:eclipse_ide:3.6:rc4:*:*:*:*:*:*3.6 rc4VulnerableEclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.1.1:*:*:*:*:*:*:* Versions 3.1.1 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.1.2:*:*:*:*:*:*:* Versions 3.1.2 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.3:*:*:*:*:*:*:* Versions 3.3 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.3.1:*:*:*:*:*:*:* Versions 3.3.1 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.3.1.1:*:*:*:*:*:*:* Versions 3.3.1.1 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.3.2:*:*:*:*:*:*:* Versions 3.3.2 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.4:*:*:*:*:*:*:* Versions 3.4 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.4.1:*:*:*:*:*:*:* Versions 3.4.1 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.4.2:*:*:*:*:*:*:* Versions 3.4.2 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.5:*:*:*:*:*:*:* Versions 3.5 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.5.1:*:*:*:*:*:*:* Versions 3.5.1 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.5.2:*:*:*:*:*:*:* Versions 3.5.2 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.6:m1:*:*:*:*:*:* Versions 3.6 m1 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.6:m2:*:*:*:*:*:* Versions 3.6 m2 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.6:m3:*:*:*:*:*:* Versions 3.6 m3 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.6:m4:*:*:*:*:*:* Versions 3.6 m4 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.6:m5:*:*:*:*:*:* Versions 3.6 m5 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.6:m6:*:*:*:*:*:* Versions 3.6 m6 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.6:m7:*:*:*:*:*:* Versions 3.6 m7 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.6:rc1:*:*:*:*:*:* Versions 3.6 rc1 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.6:rc2:*:*:*:*:*:* Versions 3.6 rc2 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.6:rc3:*:*:*:*:*:* Versions 3.6 rc3 Vulnerable ·Eclipse Foundation
  • cpe:2.3:a:eclipse:eclipse_ide:3.6:rc4:*:*:*:*:*:* Versions 3.6 rc4 Vulnerable ·Eclipse Foundation

Remediation

Red Hat 1 advisory

  • RHSA-2011:0568 Released 2011-05-19 · Red Hat rating Low
    eclipse security, bug fix, and enhancement update
    • Red Hat Enterprise Linux Server (v. 6) eclipse-1:3.6.1-6.13.el6, eclipse-birt-2.6.0-1.1.el6, eclipse-callgraph-0.6.1-1.el6 +26
    • Red Hat Enterprise Linux Server Optional (v. 6) eclipse-cdt-1:7.0.1-4.el6, eclipse-cdt-parsers-1:7.0.1-4.el6, eclipse-cdt-sdk-1:7.0.1-4.el6 +12
    • Red Hat Enterprise Linux Workstation (v. 6) eclipse-1:3.6.1-6.13.el6, eclipse-birt-2.6.0-1.1.el6, eclipse-callgraph-0.6.1-1.el6 +26
    • Red Hat Enterprise Linux Workstation Optional (v. 6) eclipse-cdt-1:7.0.1-4.el6, eclipse-cdt-parsers-1:7.0.1-4.el6, eclipse-cdt-sdk-1:7.0.1-4.el6 +12

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2011:0568
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2011:0568
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2011:0568
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2011:0568

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-4647
  2. 2026-10-03 Alias added: GHSA-2q22-9jhj-hx5g

References

Exploit 2

Advisory 4

Other 2

  • TI-2023-03905 XXE in eclipse.platform / Eclipse IDE CVSS 3.1MEDIUM 5.0
  • TI-2008-06957 Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application… CVSS 2.0MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences