This host is running Eclipse IDE is prone to multiple Cross-Site Scripting vulnerabilities.

Successful exploitation will allow remote attackers to execute arbitrary HTML and script code in a user's browser session in the context of an affected application. Impact Level: Application.

Upgrade to Eclipse IDE Version 3.6.2 or later For updates refer to http://www.eclipse.org/downloads/

- Input passed to the 'onload' parameter in 'help/index.jsp' and 'help/advanced/content.jsp' are not properly sanitised before being returned to the user.

Eclipse IDE Version 3.6.1 and prior

• http://r00tin.blogspot.com/2008/04/eclipse-local-web-server-exploitation.html
• http://xforce.iss.net/xforce/xfdb/64833
• http://yehg.net/lab/pr0js/advisories/eclipse/[eclipse_help_server]_cross_site_scripting

---

Updated on 2015-03-25