Lucene search

Apache TomcatTOMCAT:3C400C905C414CA6871D3DB41AFC2979

HistoryApr 18, 2007 - 12:00 a.m.

Fixed in Apache Tomcat 5.5.18, 5.0.SVN

2007-04-1800:00:00

Apache Tomcat

tomcat.apache.org

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.036 Low

EPSS

Percentile

91.5%

JSON

Moderate: Cross-site scripting CVE-2006-7195

The implicit-objects.jsp in the examples webapp displayed a number of unfiltered header values. This enabled a XSS attack. These values are now filtered.

Affects: 5.0.0-5.0.30, 5.5.0-5.5.17

CPENameOperatorVersion
apache tomcatge5.0.0
apache tomcatle5.0.30
apache tomcatge5.5.0
apache tomcatle5.5.17

Name	Operator	Version
apache tomcat	ge	5.0.0
apache tomcat	le	5.0.30
apache tomcat	ge	5.5.0
apache tomcat	le	5.5.17

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.036 Low

EPSS

Percentile

91.5%

JSON

Related for TOMCAT:3C400C905C414CA6871D3DB41AFC2979