Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-2696
HistoryAug 05, 2010 - 6:17 p.m.

CVE-2009-2696

2010-08-0518:17:57
CWE-79
[email protected]
web.nvd.nist.gov
46
apache tomcat
xss
vulnerability
calendar application
web script
html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

4.5 Medium

AI Score

Confidence

High

0.143 Low

EPSS

Percentile

95.7%

JSON

Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to “invalid HTML.” NOTE: this is due to a missing fix for CVE-2009-0781.

Affected configurations

NVD
Node
apachetomcatRange≤4.1.39
AND
redhatdesktop_workstationMatch5
OR
redhatenterprise_linuxMatch5
OR
redhatenterprise_linux_desktopMatch5.0
CPENameOperatorVersion
apache:tomcatapache tomcatle4.1.39

Related

prion 2
veracode 2
cvelist 2
nvd 2
openvas 52
nessus 32
centos 2
redhat 3
oraclelinux 2
packetstorm 1
securityvulns 4
ubuntucve 1
github 1
osv 1
cve 1
altlinux 1
fedora 3
tomcat 3
ubuntu 1
ibm 1
debian 1
gentoo 1
vmware 2
threatpost 1
prion
prion
Cross site scripting
2010-08-05 18:17:00
Cross site scripting
2009-03-09 21:30:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-04-10 00:46:42
Cross-Site Scripting (XSS)
2019-07-08 13:43:12
cvelist
cvelist
CVE-2009-2696
2010-08-05 18:00:00
CVE-2009-0781
2009-03-09 21:00:00
nvd
nvd
CVE-2009-2696
2010-08-05 18:17:57
CVE-2009-0781
2009-03-09 21:30:00
openvas
openvas
RedHat Update for tomcat5 RHSA-2010:0580-01
2010-08-06 00:00:00
RedHat Update for tomcat5 RHSA-2010:0580-01
2010-08-06 00:00:00
CentOS Update for tomcat5 CESA-2010:0580 centos5 i386
2011-08-09 00:00:00
nessus
nessus
Oracle Linux 5 : tomcat5 (ELSA-2010-0580)
2013-07-12 00:00:00
Scientific Linux Security Update : tomcat5 on SL5.x i386/x86_64
2012-08-01 00:00:00
RHEL 5 : tomcat5 (RHSA-2010:0580)
2010-08-03 00:00:00
centos
centos
tomcat5 security update
2010-08-03 00:39:04
tomcat5 security update
2009-07-29 17:30:22
redhat
redhat
(RHSA-2010:0580) Important: tomcat5 security update
2010-08-02 00:00:00
(RHSA-2009:1164) Important: tomcat security update
2009-07-21 00:00:00
(RHSA-2009:1562) Important: tomcat security update
2009-11-09 00:00:00
oraclelinux
oraclelinux
tomcat5 security update
2010-08-02 00:00:00
tomcat security update
2009-07-21 00:00:00
packetstorm
packetstorm
Apache Tomcat Cross Site Scripting
2009-03-06 00:00:00
securityvulns
securityvulns
[SECURITY] CVE-2009-0781 XSS in Apache Tomcat examples web application
2009-03-09 00:00:00
Apache Tomcat crossite scripting
2009-03-09 00:00:00
[security bulletin] HPSBMA02535 SSRT100029 rev.1 - HP Performance Manager, Remote Unauthorized Access, Cross Site Scripting (XSS), Denial of Service (DoS)
2010-05-20 00:00:00
ubuntucve
ubuntucve
CVE-2009-0781
2009-03-09 00:00:00
github
github
Cross-site scripting in Apache Tomcat
2022-05-02 03:18:14
osv
osv
Cross-site scripting in Apache Tomcat
2022-05-02 03:18:14
cve
cve
CVE-2009-0781
2009-03-09 21:30:00
altlinux
altlinux
Security fix for the ALT Linux 5 package tomcat6 version 0:6.0.18-alt6_8jpp5
2010-01-14 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: tomcat6-6.0.20-1.fc11
2009-11-27 21:36:22
[SECURITY] Fedora 12 Update: tomcat6-6.0.20-1.fc12
2009-11-27 21:50:49
[SECURITY] Fedora 10 Update: tomcat6-6.0.20-1.fc10
2009-11-27 21:56:48
tomcat
tomcat
Fixed in Apache Tomcat 6.0.20
2009-06-03 00:00:00
Fixed in Apache Tomcat 5.5.28
2009-09-04 00:00:00
Fixed in Apache Tomcat 4.1.40
2008-12-12 00:00:00
ubuntu
ubuntu
Tomcat vulnerabilities
2009-06-15 00:00:00
ibm
ibm
Security Bulletin: TADDM affected by multiple vulnerabilities due to Apache Tomcat libraries
2023-01-27 10:54:22
debian
debian
[SECURITY] [DSA 2207-1] tomcat5.5 security update
2011-03-29 22:35:34
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2012-06-24 00:00:00
vmware
vmware
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components
2009-11-20 00:00:00
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components.
2009-11-20 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

4.5 Medium

AI Score

Confidence

High

0.143 Low

EPSS

Percentile

95.7%

JSON
Related for CVE-2009-2696
prion2veracode2cvelist2nvd2openvas52nessus32centos2redhat3oraclelinux2packetstorm1securityvulns4ubuntucve1github1osv1cve1altlinux1fedora3tomcat3ubuntu1ibm1debian1gentoo1vmware2threatpost1