Vulnerability in Apache Tomcat

CVE-2006-7195

Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.

EPSS: 0.055 (91.9th percentile) — read the EPSS interpretation.

Affected products

  • Apache Tomcat — versions 5.0.0, 5.0.1, 5.0.2
  • N/a — versions n/a

References