Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-1355
HistoryMay 21, 2007 - 12:00 a.m.

CVE-2007-1355

2007-05-2100:00:00
ubuntu.com
ubuntu.com
13

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.079 Low

EPSS

Percentile

94.2%

Multiple cross-site scripting (XSS) vulnerabilities in the
appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through
4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23,
and 6.0.0 through 6.0.10 allow remote attackers to inject arbitrary web
script or HTML via the test parameter and unspecified vectors.

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.079 Low

EPSS

Percentile

94.2%