GoogleOSV:GHSA-P57V-P3FX-QGWMApache Tomcat XSS Vulnerability
5.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.036 Low
EPSS
Percentile
91.5%
Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.
References
support.avaya.com/elmodocs2/security/ASA-2007-206.htm
tomcat.apache.org/security-5.html
www.redhat.com/support/errata/RHSA-2007-0327.html
www.redhat.com/support/errata/RHSA-2008-0261.html
access.redhat.com/errata/RHSA-2007:0326
access.redhat.com/errata/RHSA-2007:0327
access.redhat.com/errata/RHSA-2007:0328
access.redhat.com/errata/RHSA-2007:0340
access.redhat.com/errata/RHSA-2008:0261
access.redhat.com/errata/RHSA-2008:0524
access.redhat.com/security/cve/CVE-2006-7195
bugzilla.redhat.com/show_bug.cgi?id=237081
github.com/apache/tomcat
nvd.nist.gov/vuln/detail/CVE-2006-7195
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10514
web.archive.org/web/20080515114843/www.securityfocus.com/bid/28481
web.archive.org/web/20171015140308/www.securityfocus.com/archive/1/500396/100/0/threaded
web.archive.org/web/20171015140313/www.securityfocus.com/archive/1/500412/100/0/threaded
web.archive.org/web/20201021082255/www.securityfocus.com/archive/1/485938/100/0/threaded
web.archive.org/web/20230518052431/lists.vmware.com/pipermail/security-announce/2008/000003.html
Related
5.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.036 Low
EPSS
Percentile
91.5%