Lucene search

K
ApacheTomcat5.5.6

6 matches found

CVE
CVE
added 2009/03/09 9:30 p.m.127 views

CVE-2009-0781

Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, relat...

4.3CVSS4.6AI score0.20823EPSS
CVE
CVE
added 2009/06/05 4:0 p.m.114 views

CVE-2009-0033

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of ...

5CVSS4.5AI score0.32437EPSS
CVE
CVE
added 2009/06/05 4:0 p.m.114 views

CVE-2009-0580

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) Memory...

4.3CVSS4.9AI score0.88708EPSS
CVE
CVE
added 2009/11/12 11:30 p.m.109 views

CVE-2009-3548

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.

7.5CVSS7.8AI score0.88795EPSS
CVE
CVE
added 2009/06/16 9:0 p.m.103 views

CVE-2008-5515

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct di...

5CVSS4.8AI score0.34279EPSS
CVE
CVE
added 2009/04/09 3:8 p.m.82 views

CVE-2008-5519

The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST ...

2.6CVSS5.6AI score0.05777EPSS