Vulnerability in N/a

CVE-2007-3386

Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the alia…

EPSS: 0.738 (98.8th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

36417 (x_refsource_OSVDB, vdb-entry)
FEDORA-2007-3456 (x_refsource_FEDORA, vendor-advisory)
27267 (x_refsource_SECUNIA, third-party-advisory)
ADV-2007-3527 (vdb-entry, x_refsource_VUPEN)
JVN#59851336 (x_refsource_JVN, third-party-advisory)
tomcat-hostmanager-alias-xss(36001) (vdb-entry, x_refsource_XF)
25314 (vdb-entry, x_refsource_BID)
26465 (x_refsource_SECUNIA, third-party-advisory)
20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1) (mailing-list, x_refsource_BUGTRAQ)
33668 (x_refsource_SECUNIA, third-party-advisory)