PT-2019-4683 · Apache +3 · Apache Tomcat +3

🗓️ 12 Apr 2019 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 24 Views

Tomcat printenv SSI echoes user data, enabling XSS in listed versions.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2016-3092)	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition	30 Apr 201911:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - January 2019 through July 2022 affects AIX LPARs in IBM PureData System for Operational Analytics	4 Nov 202220:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Mar 202503:41	–	ibm
IBM Security Bulletins	Release of QRadar 7.2.8 Patch 4 (7.2.8.20170224202650) Updated w/Security Bulletins	10 May 201914:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Application Dependency Discovery Manager (TADDM)	16 Oct 201914:06	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in HTTP/2 protocol used by Netty on IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2023-44487)	5 Apr 202415:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Integration Bus, IBM App Connect Enterpise v11 and WebSphere Message Broker	23 Mar 202020:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is affected by CVE-2021-30640	25 Jan 202207:56	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in WebSphere Application Server Liberty may affect IBM Robotic Process Automation and result in a denial of service (CVE-2023-24998).	20 Jun 202314:25	–	ibm

Source	Link
github	www.github.com/RedTeamPentesting/CVE-2020-13935
github	www.github.com/nibiwodong/CNVD-2020-10487-Tomcat-ajp-POC
github	www.github.com/masahiro331/CVE-2020-9484
github	www.github.com/sgdream/CVE-2020-1938
github	www.github.com/xindongzhuaizhuai/CVE-2020-1938
github	www.github.com/IdealDreamLast/CVE-2020-9484
github	www.github.com/sv3nbeast/CVE-2020-1938-Tomact-file_include-file_read
github	www.github.com/laolisafe/CVE-2020-1938
github	www.github.com/osamahamad/CVE-2020-9484-Mass-Scan
github	www.github.com/PenTestical/CVE-2020-9484

23 Jul 2024 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.1 - 9.8

CVSS 27.8

CVSS 39.8

EPSS0.99999

SSVC

apache tomcat server side include printenv command cross site scripting vulnerability impact