Vulnerability in examples of authenticity verification using forms in examples of web application server applications like Apache Tomcat, which allows attackers to carry out cross-site scripting attacks.

🗓️ 24 Jun 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Vulnerability in authenticity verification forms on Apache Tomcat enables cross site scripting.

Reporter	Title	Published	Views	Family All 124
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge 8.0.0.24 addresses multiple vulnerabilities by updating Apache Tomcat Server	31 Oct 202315:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to cross-site scripting due to Apache Tomcat (CVE-2022-34305)	10 Jan 202310:31	–	ibm
IBM Security Bulletins	Security Bulletin: The CVE-2022-34305 vulnerability in Apache Tomcat affects App Connect Professional.	15 Jul 202205:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerability in Apache Tomcat	7 Nov 202407:43	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.9 addresses multiple security vulnerabilities.	18 Jul 202313:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Build is affected by CVE-2022-34305	20 Dec 202207:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Log4j 1.x	3 Aug 202216:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is affected by CVE-2022-34305	20 Jan 202316:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to cross-site scripting in Apache Tomcat (CVE-2022-34305)	12 Jan 202321:59	–	ibm

Vulners

Node

apache tomcatRange10.1.0-m1–10.1.0-m17

apache tomcatRange10.0.0-m1–10.0.23

apache tomcatRange9.0.30–9.0.65

apache tomcatRange8.5.50–8.5.82

Source	Link
openwall	www.openwall.com/lists/oss-security/2022/06/23/1
lists	www.lists.apache.org/thread/k04zk0nq6w57m72w5gb0r6z9ryhmvr4k
abf	www.abf.rosalinux.ru/advisories/ROSA-SA-2023-2258
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail

29 Jul 2025 00:00Current

7High risk

Vulners AI Score7

CVSS 36.1

CVSS 26.4

EPSS0.06156