XSS in Apache Tomcat

CVE-2006-7196

Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.722 (99.4th percentile) — read the EPSS interpretation.

Affected products

  • Apache Tomcat — versions 4.0.0, 4.0.1, 4.0.2
  • N/a — versions n/a

Weakness classification (CWE)

References