tomcat -- Cross-site scripting vulnerability

2010-11-1200:00:00

vuxml.freebsd.org

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

45.6%

JSON

The Tomcat security team reports:

The HTML Manager interface displayed web applciation
provided data, such as display names, without filtering.
A malicious web application could trigger script execution
by an administartive user when viewing the manager pages.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchtomcat< 5.5.32UNKNOWN
FreeBSDanynoarchtomcat< 6.0.30UNKNOWN
FreeBSDanynoarchtomcat< 7.0.6UNKNOWN