Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:7868
HistoryNov 21, 2018 - 6:37 a.m.

Remote Code Execution (RCE)

2018-11-2106:37:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15

4.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

JSON

catalina is vulnerable to a remote code execution (RCE) attack. The library allows the replacement of the XML parser used for other web applications, allowing a malicious user to gain access to the applications’ web.xml, context.xml or tld files.

References

Related

cve 2
nessus 31
ubuntucve 2
prion 2
securityvulns 4
seebug 1
osv 2
github 2
debiancve 1
redhat 8
tomcat 4
openvas 45
fedora 3
ubuntu 1
oraclelinux 1
centos 1
debian 1
ibm 1
gentoo 1
vmware 2
threatpost 1
cve
cve
CVE-2009-0783
2009-06-05 16:00:00
CVE-2011-2481
2011-08-15 21:55:00
nessus
nessus
Apache Tomcat Cross-Application File Manipulation
2009-06-22 00:00:00
RHEL 4 : JBoss EAP (RHSA-2009:1146)
2013-01-24 00:00:00
RHEL 5 : JBoss EAP (RHSA-2009:1143)
2013-01-24 00:00:00
ubuntucve
ubuntucve
CVE-2009-0783
2009-06-05 00:00:00
CVE-2011-2481
2011-08-15 00:00:00
prion
prion
Code injection
2009-06-05 16:00:00
Design/Logic Flaw
2011-08-15 21:55:00
securityvulns
securityvulns
[SECURITY] CVE-2009-0783 Apache Tomcat Information disclosure
2009-06-05 00:00:00
Apache Tomcat multiple security vulnerabilities
2009-06-14 00:00:00
[security bulletin] HPSBMA02535 SSRT100029 rev.1 - HP Performance Manager, Remote Unauthorized Access, Cross Site Scripting (XSS), Denial of Service (DoS)
2010-05-20 00:00:00
seebug
seebug
Apache Tomcat XMLθ§£ζžε™¨ιžζŽˆζƒζ–‡δ»Άθ―»ε†™ζΌζ΄ž
2009-06-09 00:00:00
osv
osv
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-02 03:18:15
Apache Tomcat Allows Replacing of XML Parser
2022-05-17 02:44:28
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-02 03:18:15
Apache Tomcat Allows Replacing of XML Parser
2022-05-17 02:44:28
debiancve
debiancve
CVE-2011-2481
2011-08-15 21:55:00
redhat
redhat
(RHSA-2009:1617) Low: tomcat security update for Red Hat Network Satellite Server
2009-11-30 00:00:00
(RHSA-2009:1145) Important: JBoss Enterprise Application Platform 4.3.0.CP05 update
2009-07-06 00:00:00
(RHSA-2009:1506) Important: tomcat6 security update
2009-10-14 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 7.0.19
2011-07-19 00:00:00
Fixed in Apache Tomcat 4.1.40
2008-12-12 00:00:00
Fixed in Apache Tomcat 6.0.20
2009-06-03 00:00:00
openvas
openvas
Apache Tomcat Multiple Vulnerabilities (Jun 2009)
2009-06-16 00:00:00
Mandrake Security Advisory MDVSA-2009:138 (tomcat5)
2009-06-30 00:00:00
Fedora Core 12 FEDORA-2009-11352 (tomcat6)
2009-12-03 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: tomcat6-6.0.20-1.fc11
2009-11-27 21:36:22
[SECURITY] Fedora 10 Update: tomcat6-6.0.20-1.fc10
2009-11-27 21:56:48
[SECURITY] Fedora 12 Update: tomcat6-6.0.20-1.fc12
2009-11-27 21:50:49
ubuntu
ubuntu
Tomcat vulnerabilities
2009-06-15 00:00:00
oraclelinux
oraclelinux
tomcat security update
2009-07-21 00:00:00
centos
centos
tomcat5 security update
2009-07-29 17:30:22
debian
debian
[SECURITY] [DSA 2207-1] tomcat5.5 security update
2011-03-29 22:35:34
ibm
ibm
Security Bulletin: TADDM affected by multiple vulnerabilities due to Apache Tomcat libraries
2023-01-27 10:54:22
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2012-06-24 00:00:00
vmware
vmware
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components.
2009-11-20 00:00:00
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components
2009-11-20 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

4.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

JSON
Related for VERACODE:7868
cve2nessus31ubuntucve2prion2securityvulns4seebug1osv2github2debiancve1redhat8tomcat4openvas45fedora3ubuntu1oraclelinux1centos1debian1ibm1gentoo1vmware2threatpost1