Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2009-0783
HistoryJun 05, 2009 - 4:00 p.m.

CVE-2009-0783

2009-06-0516:00:00
CWE-200
redhat
web.nvd.nist.gov
92
apache tomcat
cve-2009-0783
xml parser
web applications
security vulnerability

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

4.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

17.9%

JSON

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.

Affected configurations

Nvd
Node
apachetomcatRange4.1.0–4.1.39
OR
apachetomcatRange5.5.0–5.5.27
OR
apachetomcatRange6.0.0–6.0.18
VendorProductVersionCPE
apachetomcat*cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*

References

Related

seebug 1
cvelist 2
osv 2
github 2
prion 2
securityvulns 4
ubuntucve 2
nessus 32
nvd 2
veracode 1
cve 1
debiancve 1
redhat 8
openvas 45
tomcat 4
ubuntu 1
fedora 3
centos 1
oraclelinux 1
debian 1
ibm 1
gentoo 1
vmware 2
threatpost 1
seebug
seebug
Apache Tomcat XMLθ§£ζžε™¨ιžζŽˆζƒζ–‡δ»Άθ―»ε†™ζΌζ΄ž
2009-06-09 00:00:00
cvelist
cvelist
CVE-2009-0783
2009-06-05 15:25:00
CVE-2011-2481
2011-08-15 21:00:00
osv
osv
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-02 03:18:15
Apache Tomcat Allows Replacing of XML Parser
2022-05-17 02:44:28
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-02 03:18:15
Apache Tomcat Allows Replacing of XML Parser
2022-05-17 02:44:28
prion
prion
Code injection
2009-06-05 16:00:00
Design/Logic Flaw
2011-08-15 21:55:00
securityvulns
securityvulns
[SECURITY] CVE-2009-0783 Apache Tomcat Information disclosure
2009-06-05 00:00:00
Apache Tomcat multiple security vulnerabilities
2009-06-14 00:00:00
HP Performance Manager multiple security vulnerabilities
2010-05-20 00:00:00
ubuntucve
ubuntucve
CVE-2009-0783
2009-06-05 00:00:00
CVE-2011-2481
2011-08-15 00:00:00
nessus
nessus
Apache Tomcat Cross-Application File Manipulation
2009-06-22 00:00:00
Apache Tomcat 7.0.0 < 7.0.19 multiple vulnerabilities
2011-08-03 00:00:00
RHEL 5 : JBoss EAP (RHSA-2009:1145)
2013-01-24 00:00:00
nvd
nvd
CVE-2009-0783
2009-06-05 16:00:00
CVE-2011-2481
2011-08-15 21:55:01
veracode
veracode
Remote Code Execution (RCE)
2018-11-21 06:37:28
cve
cve
CVE-2011-2481
2011-08-15 21:55:01
debiancve
debiancve
CVE-2011-2481
2011-08-15 21:55:00
redhat
redhat
(RHSA-2009:1145) Important: JBoss Enterprise Application Platform 4.3.0.CP05 update
2009-07-06 00:00:00
(RHSA-2009:1617) Low: tomcat security update for Red Hat Network Satellite Server
2009-11-30 00:00:00
(RHSA-2009:1506) Important: tomcat6 security update
2009-10-14 00:00:00
openvas
openvas
Apache Tomcat Multiple Vulnerabilities (Jun 2009)
2009-06-16 00:00:00
Fedora Core 11 FEDORA-2009-11374 (tomcat6)
2009-12-03 00:00:00
Fedora Core 10 FEDORA-2009-11356 (tomcat6)
2009-12-03 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 7.0.19
2011-07-19 00:00:00
Fixed in Apache Tomcat 6.0.20
2009-06-03 00:00:00
Fixed in Apache Tomcat 5.5.28
2009-09-04 00:00:00
ubuntu
ubuntu
Tomcat vulnerabilities
2009-06-15 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: tomcat6-6.0.20-1.fc10
2009-11-27 21:56:48
[SECURITY] Fedora 12 Update: tomcat6-6.0.20-1.fc12
2009-11-27 21:50:49
[SECURITY] Fedora 11 Update: tomcat6-6.0.20-1.fc11
2009-11-27 21:36:22
centos
centos
tomcat5 security update
2009-07-29 17:30:22
oraclelinux
oraclelinux
tomcat security update
2009-07-21 00:00:00
debian
debian
[SECURITY] [DSA 2207-1] tomcat5.5 security update
2011-03-29 22:35:34
ibm
ibm
Security Bulletin: TADDM affected by multiple vulnerabilities due to Apache Tomcat libraries
2023-01-27 10:54:22
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2012-06-24 00:00:00
vmware
vmware
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components.
2009-11-20 00:00:00
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components
2009-11-20 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

4.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

17.9%

JSON
Related for CVE-2009-0783
seebug1cvelist2osv2github2prion2securityvulns4ubuntucve2nessus32nvd2veracode1cve1debiancve1redhat8openvas45tomcat4ubuntu1fedora3centos1oraclelinux1debian1ibm1gentoo1vmware2threatpost1