Apache Tomcat has a Cross-site Scripting vulnerability

🗓️ 29 Jun 2026 21:32:15Reported by GitHub Advisory DatabaseType

Basic XSS in the number guess example for Apache Tomcat.

Reporter	Title	Published	Views	Family All 139
GithubExploit	Exploit for Basic XSS in Apache Tomcat	8 Jul 202608:56	–	githubexploit
GithubExploit	Exploit for Basic XSS in Apache Tomcat	18 Oct 202600:01	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Apache Tomcat	22 Oct 202617:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities.	3 Nov 202610:34	–	ibm
attackerkb	CVE-2026-50229	29 Jun 202620:36	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : tomcat9, tomcat9-admin-webapps, tomcat9-el-3.0-api (ALAS2023-2026-1945)	20 Jul 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : tomcat10, tomcat10-admin-webapps, tomcat10-el-5.0-api (ALAS2023-2026-1946)	20 Jul 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : tomcat, --advisory ALAS2TOMCAT9-2026-027 (ALASTOMCAT9-2026-027)	20 Jul 202600:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0311: tomcat (ALINUX3-SA-2026:0311)	20 Oct 202600:00	–	nessus
Tenable Nessus	AlmaLinux 10 : tomcat9 (ALSA-2026:68651)	19 Sep 202600:00	–	nessus

Vulners

Node

org.apache.tomcat tomcatRange8.5.0–8.5.100maven

org.apache.tomcat tomcatRange9.0.0.M1–9.0.119maven

org.apache.tomcat tomcatRange10.1.0-M1–10.1.56maven

org.apache.tomcat tomcatRange11.0.0-M1–11.0.23maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-50229
lists	www.lists.apache.org/thread/wlt2no8bw45zl1w8byop4zfqphldf5j0
openwall	www.openwall.com/lists/oss-security/2026/06/29/20
github	www.github.com/apache/tomcat/commit/0d5bdd5b0dd964e9f73e530b7d753462b9bfd1d0
github	www.github.com/apache/tomcat/commit/1fe95d841e9d461a16069974142d12c3ef68819a
github	www.github.com/apache/tomcat/commit/de5a950415fc67713f17fab63d0c7809e0fca80b
tomcat	www.tomcat.apache.org/security-10.html
tomcat	www.tomcat.apache.org/security-11.html
tomcat	www.tomcat.apache.org/security-9.html
github	www.github.com/advisories/GHSA-pg42-rg8c-j886

04 Nov 2026 16:45Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.1

EPSS0.04091

SSVC