Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-HC39-RJWP-QFFQ
HistoryMay 01, 2022 - 6:03 p.m.

Apache Tomcat XSS Vulnerabilities in Examples Web Application

2022-05-0118:03:36
Google
osv.dev
73

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.968 High

EPSS

Percentile

99.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ; character, as demonstrated by a URI containing a snp/snoop.jsp; sequence.

References

Related

packetstorm 1
prion 1
nessus 24
securityvulns 3
veracode 1
ubuntucve 1
github 1
cve 1
jvn 1
openvas 28
redhat 5
oraclelinux 1
centos 1
tomcat 3
fedora 5
altlinux 1
ibm 1
packetstorm
packetstorm
CVE-2007-2449.txt
2007-06-15 00:00:00
prion
prion
Cross site scripting
2007-06-14 23:30:00
nessus
nessus
Apache Tomcat snoop.jsp URI XSS
2007-06-18 00:00:00
SuSE9 Security Update : Tomcat (YOU Patch Number 12116)
2009-09-24 00:00:00
Oracle Linux 5 : tomcat (ELSA-2007-0569)
2013-07-12 00:00:00
securityvulns
securityvulns
[Full-disclosure] [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples
2007-06-14 00:00:00
Apache Tomcat crossite scripting
2007-06-14 00:00:00
CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)
2009-01-28 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-04-10 00:19:32
ubuntucve
ubuntucve
CVE-2007-2449
2007-06-14 00:00:00
github
github
Apache Tomcat XSS Vulnerabilities in Examples Web Application
2022-05-01 18:03:36
cve
cve
CVE-2007-2449
2007-06-14 23:30:00
jvn
jvn
JVN#64851600 Apache Tomcat sample web application cross-site scripting vulnerability
2007-06-15 00:00:00
openvas
openvas
SLES10: Security update for Tomcat 5
2009-10-13 00:00:00
SLES9: Security update for Tomcat
2009-10-10 00:00:00
SLES10: Security update for Tomcat 5
2009-10-13 00:00:00
redhat
redhat
(RHSA-2007:0569) Moderate: tomcat security update
2007-07-17 00:00:00
(RHSA-2007:0876) Moderate: tomcat security update
2007-10-11 00:00:00
(RHSA-2008:0630) Low: Red Hat Network Satellite Server security update
2008-08-13 00:00:00
oraclelinux
oraclelinux
Moderate: tomcat security update
2007-07-17 00:00:00
centos
centos
tomcat5 security update
2007-07-22 15:57:46
tomcat
tomcat
Fixed in Apache Tomcat 6.0.14
2007-08-13 00:00:00
Fixed in Apache Tomcat 5.5.25, 5.0.SVN
2007-09-08 00:00:00
Fixed in Apache Tomcat 4.1.37
2005-10-06 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: tomcat5-5.5.25-1jpp.1.fc8
2007-11-17 05:37:36
[SECURITY] Fedora 7 Update: tomcat5-5.5.25-1jpp.1.fc7
2007-11-17 05:34:43
[SECURITY] Fedora 7 Update: tomcat5-5.5.26-1jpp.2.fc7
2008-02-13 04:55:03
altlinux
altlinux
Security fix for the ALT Linux 5 package tomcat5 version 0:5.5.25-alt1_1.1jpp5.0
2007-11-30 00:00:00
ibm
ibm
Security Bulletin: TADDM affected by multiple vulnerabilities due to Apache Tomcat libraries
2023-01-27 10:54:22

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.968 High

EPSS

Percentile

99.7%

JSON
Related for OSV:GHSA-HC39-RJWP-QFFQ
packetstorm1prion1nessus24securityvulns3veracode1ubuntucve1github1cve1jvn1openvas28redhat5oraclelinux1centos1tomcat3fedora5altlinux1ibm1