Cross-site scripting in Apache Tomcat

🗓️ 30 May 2019 03:30:42Reported by GitHub Advisory DatabaseType

Apache Tomcat XSS vulnerability in SSI printenv command

Reporter	Title	Published	Views	Family All 159
0day.today	Apache Tomcat 9.0.0.M1 - Cross-Site Scripting (XSS) Vulnerability	13 Jul 202100:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM WebSphere Cast Iron Solution & App Connect Professional is affected by Apache Tomcat vulnerabilities.	10 Jan 202007:16	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (TADDM) (CVE-2019-0232, CVE-2019-0221)	13 Jan 202012:45	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in Apache Tomcat affects multiple IBM Rational products based on IBM's Jazz technology	28 Apr 202118:35	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability has been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2019-0221)	19 Jun 201919:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	24 Aug 202010:03	–	ibm
Tenable Nessus	Apache Tomcat 9.0.x < 9.0.19 Remote Code Execution Vulnerability (Windows)	13 May 201900:00	–	nessus
Tenable Nessus	Amazon Linux 2 : tomcat (ALAS-2023-2200)	14 Aug 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2023-014)	27 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : tomcat8 (ALAS-2019-1234)	26 Jul 201900:00	–	nessus

Vulners

Node

org.apache.tomcat tomcatRange7.0.0–7.0.94maven

org.apache.tomcat tomcatRange8.5.0–8.5.40maven

org.apache.tomcat tomcatRange9.0.0–9.0.17maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-0221
lists	www.lists.apache.org/thread.html/6e6e9eacf7b28fd63d249711e9d3ccd4e0a83f556e324aee37be5a8c@%3Cannounce.tomcat.apache.org%3E
access	www.access.redhat.com/errata/RHSA-2019:3929
access	www.access.redhat.com/errata/RHSA-2019:3931
lists	www.lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9@%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c@%3Cannounce.apache.org%3E
lists	www.lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a@%3Cdev.tomcat.apache.org%3E

18 Jun 2026 20:17Current

1.7Low risk

Vulners AI Score1.7

CVSS 24.3

CVSS 36.1

EPSS0.45571