CVE-2021-34427: Eclipse Business Intelligence And Reporting Tools

Critical severity, CVSS 9.8. EPSS: 58% chance of exploitation in the next 30 days.

In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running instance.

Affected products

• Eclipse Business Intelligence And Reporting Tools: up to and including 4.8.0

Published 2021-06-25. Last modified 2026-06-17.