Lucene search
Veracode Vulnerability DatabaseVERACODE:13533HistoryMar 25, 2019 - 8:40 a.m.
Cross-Site Scripting (XSS)
2019-03-2508:40:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
0.001 Low
EPSS
Percentile
38.1%
Apache Tomcat is vulnerable to Cross-site scripting. An attacker is able to inject arbitrary Javascript into a user’s browser by sending a malicious code via a request for a .JSP file, which will be executed on the victim’s browser when the error message is rendered.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tomcat-util | eq | 3.2.1 |
Related
nessus
nessus
Apache Tomcat 3.x < 3.2.2 JSP Error Condition XSS
2010-11-02 00:00:00
osv
osv
Apache Tomcat allows webmasters to insert xss into error messages
2022-04-30 18:16:47
github
github
Apache Tomcat allows webmasters to insert xss into error messages
2022-04-30 18:16:47
cve
cve
CVE-2001-0829
2001-12-06 05:00:00
cvelist
cvelist
CVE-2001-0829
2001-11-22 05:00:00
cert
cert
nvd
nvd
CVE-2001-0829
2001-12-06 05:00:00
tomcat
tomcat
Fixed in Apache Tomcat 3.2.2
2002-03-09 00:00:00