Lucene search

Apache Tomcat Cross-site scripting (XSS) vulnerability

🗓️ 01 May 2022 23:13:45Reported by GitHub Advisory DatabaseType

Apache Tomcat XSS vulnerability in versions 5.5.9 to 5.5.26 and 6.0.0 to 6.0.1

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 76
Cvelist	CVE-2008-1947	4 Jun 200819:17	–	cvelist
securityvulns	[SECURITY] CVE-2008-1947: Tomcat host-manager XSS vulnerability	4 Jun 200800:00	–	securityvulns
securityvulns	Apache Tomcat crossite scripting	25 Feb 201000:00	–	securityvulns
securityvulns	CA20100222-01: Security Notice for CA Service Desk	25 Feb 201000:00	–	securityvulns
OpenVAS	Debian: Security Advisory (DSA-1593-1)	11 Jun 200800:00	–	openvas
OpenVAS	Debian Security Advisory DSA 1593-1 (tomcat5.5)	11 Jun 200800:00	–	openvas
OpenVAS	Fedora Update for tomcat5 FEDORA-2008-8113	17 Feb 200900:00	–	openvas
OpenVAS	Fedora Update for tomcat5 FEDORA-2008-8113	17 Feb 200900:00	–	openvas
OpenVAS	Oracle: Security Advisory (ELSA-2008-0648)	8 Oct 201500:00	–	openvas
OpenVAS	RedHat Update for tomcat RHSA-2008:0648-01	6 Mar 200900:00	–	openvas

Vulners

Node

org.apache.tomcat.embed tomcat-embed-coreRange6.0.0–6.0.16

org.apache.tomcat.embed tomcat-embed-coreRange5.5.9–5.5.26

org.apache.tomcat tomcatRange6.0.0–6.0.16

org.apache.tomcat tomcatRange5.5.9–5.5.26

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2008-1947
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/42816
lists	www.lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11534
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6009
redhat	www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html
redhat	www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 May 2022 23:45Current

5.7Medium risk

Vulners AI Score5.7

CVSS24.3

EPSS0.49114

CWE-79