Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-0783
HistoryJun 05, 2009 - 4:00 p.m.

CVE-2009-0783

2009-06-0516:00:00
CWE-200
[email protected]
web.nvd.nist.gov

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

4.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

4.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.1%

JSON

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.

Affected configurations

NVD
Node
apachetomcatRange4.1.0–4.1.39
OR
apachetomcatRange5.5.0–5.5.27
OR
apachetomcatRange6.0.0–6.0.18

References

Related

securityvulns 4
prion 2
seebug 1
cvelist 2
veracode 1
cve 2
ubuntucve 2
nessus 32
osv 2
github 2
nvd 1
debiancve 1
redhat 8
openvas 45
tomcat 4
fedora 3
ubuntu 1
oraclelinux 1
centos 1
debian 1
ibm 1
gentoo 1
vmware 2
threatpost 1
securityvulns
securityvulns
[SECURITY] CVE-2009-0783 Apache Tomcat Information disclosure
2009-06-05 00:00:00
Apache Tomcat multiple security vulnerabilities
2009-06-14 00:00:00
[security bulletin] HPSBMA02535 SSRT100029 rev.1 - HP Performance Manager, Remote Unauthorized Access, Cross Site Scripting (XSS), Denial of Service (DoS)
2010-05-20 00:00:00
prion
prion
Code injection
2009-06-05 16:00:00
Design/Logic Flaw
2011-08-15 21:55:00
seebug
seebug
Apache Tomcat XMLθ§£ζžε™¨ιžζŽˆζƒζ–‡δ»Άθ―»ε†™ζΌζ΄ž
2009-06-09 00:00:00
cvelist
cvelist
CVE-2009-0783
2009-06-05 15:25:00
CVE-2011-2481
2011-08-15 21:00:00
veracode
veracode
Remote Code Execution (RCE)
2018-11-21 06:37:28
cve
cve
CVE-2009-0783
2009-06-05 16:00:00
CVE-2011-2481
2011-08-15 21:55:01
ubuntucve
ubuntucve
CVE-2009-0783
2009-06-05 00:00:00
CVE-2011-2481
2011-08-15 00:00:00
nessus
nessus
Apache Tomcat Cross-Application File Manipulation
2009-06-22 00:00:00
Apache Tomcat 7.0.0 < 7.0.19 multiple vulnerabilities
2011-08-03 00:00:00
RHEL 5 : JBoss EAP (RHSA-2009:1145)
2013-01-24 00:00:00
osv
osv
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-02 03:18:15
Apache Tomcat Allows Replacing of XML Parser
2022-05-17 02:44:28
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-02 03:18:15
Apache Tomcat Allows Replacing of XML Parser
2022-05-17 02:44:28
nvd
nvd
CVE-2011-2481
2011-08-15 21:55:01
debiancve
debiancve
CVE-2011-2481
2011-08-15 21:55:00
redhat
redhat
(RHSA-2009:1617) Low: tomcat security update for Red Hat Network Satellite Server
2009-11-30 00:00:00
(RHSA-2009:1145) Important: JBoss Enterprise Application Platform 4.3.0.CP05 update
2009-07-06 00:00:00
(RHSA-2009:1506) Important: tomcat6 security update
2009-10-14 00:00:00
openvas
openvas
Apache Tomcat Multiple Vulnerabilities (Jun 2009)
2009-06-16 00:00:00
Fedora Core 10 FEDORA-2009-11356 (tomcat6)
2009-12-03 00:00:00
SLES10: Security update for Tomcat 5
2009-10-13 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 7.0.19
2011-07-19 00:00:00
Fixed in Apache Tomcat 6.0.20
2009-06-03 00:00:00
Fixed in Apache Tomcat 5.5.28
2009-09-04 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: tomcat6-6.0.20-1.fc10
2009-11-27 21:56:48
[SECURITY] Fedora 11 Update: tomcat6-6.0.20-1.fc11
2009-11-27 21:36:22
[SECURITY] Fedora 12 Update: tomcat6-6.0.20-1.fc12
2009-11-27 21:50:49
ubuntu
ubuntu
Tomcat vulnerabilities
2009-06-15 00:00:00
oraclelinux
oraclelinux
tomcat security update
2009-07-21 00:00:00
centos
centos
tomcat5 security update
2009-07-29 17:30:22
debian
debian
[SECURITY] [DSA 2207-1] tomcat5.5 security update
2011-03-29 22:35:34
ibm
ibm
Security Bulletin: TADDM affected by multiple vulnerabilities due to Apache Tomcat libraries
2023-01-27 10:54:22
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2012-06-24 00:00:00
vmware
vmware
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components.
2009-11-20 00:00:00
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components
2009-11-20 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

4.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

4.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.1%

JSON
Related for NVD:CVE-2009-0783
securityvulns4prion2seebug1cvelist2veracode1cve2ubuntucve2nessus32osv2github2nvd1debiancve1redhat8openvas45tomcat4fedora3ubuntu1oraclelinux1centos1debian1ibm1gentoo1vmware2threatpost1