Vulnerability in Apache Tomcat

CVE-2007-1355

Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23, and 6.0.0 through 6.0.10 allow remo…

EPSS: 0.582 (99.0th percentile) — read the EPSS interpretation.

Affected products

  • Apache Tomcat — versions 4.0.0, 4.0.1, 4.0.2
  • N/a — versions n/a

References