Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-HHJG-G8XQ-HHR3
HistoryMay 02, 2022 - 3:18 a.m.

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

2022-05-0203:18:15
Google
osv.dev
19

0.0005 Low

EPSS

Percentile

18.1%

JSON

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.

References

Related

seebug 1
cvelist 2
securityvulns 4
prion 2
cve 2
veracode 1
nvd 2
ubuntucve 2
nessus 32
github 2
debiancve 1
osv 1
redhat 8
tomcat 4
openvas 45
fedora 3
ubuntu 1
oraclelinux 1
centos 1
debian 1
ibm 1
gentoo 1
vmware 2
threatpost 1
seebug
seebug
Apache Tomcat XMLθ§£ζžε™¨ιžζŽˆζƒζ–‡δ»Άθ―»ε†™ζΌζ΄ž
2009-06-09 00:00:00
cvelist
cvelist
CVE-2009-0783
2009-06-05 15:25:00
CVE-2011-2481
2011-08-15 21:00:00
securityvulns
securityvulns
[SECURITY] CVE-2009-0783 Apache Tomcat Information disclosure
2009-06-05 00:00:00
Apache Tomcat multiple security vulnerabilities
2009-06-14 00:00:00
[security bulletin] HPSBMA02535 SSRT100029 rev.1 - HP Performance Manager, Remote Unauthorized Access, Cross Site Scripting (XSS), Denial of Service (DoS)
2010-05-20 00:00:00
prion
prion
Code injection
2009-06-05 16:00:00
Design/Logic Flaw
2011-08-15 21:55:00
cve
cve
CVE-2009-0783
2009-06-05 16:00:00
CVE-2011-2481
2011-08-15 21:55:01
veracode
veracode
Remote Code Execution (RCE)
2018-11-21 06:37:28
nvd
nvd
CVE-2009-0783
2009-06-05 16:00:00
CVE-2011-2481
2011-08-15 21:55:01
ubuntucve
ubuntucve
CVE-2009-0783
2009-06-05 00:00:00
CVE-2011-2481
2011-08-15 00:00:00
nessus
nessus
Apache Tomcat Cross-Application File Manipulation
2009-06-22 00:00:00
Apache Tomcat 7.0.0 < 7.0.19 multiple vulnerabilities
2011-08-03 00:00:00
RHEL 5 : JBoss EAP (RHSA-2009:1145)
2013-01-24 00:00:00
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-02 03:18:15
Apache Tomcat Allows Replacing of XML Parser
2022-05-17 02:44:28
debiancve
debiancve
CVE-2011-2481
2011-08-15 21:55:00
osv
osv
Apache Tomcat Allows Replacing of XML Parser
2022-05-17 02:44:28
redhat
redhat
(RHSA-2009:1145) Important: JBoss Enterprise Application Platform 4.3.0.CP05 update
2009-07-06 00:00:00
(RHSA-2009:1617) Low: tomcat security update for Red Hat Network Satellite Server
2009-11-30 00:00:00
(RHSA-2009:1506) Important: tomcat6 security update
2009-10-14 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 7.0.19
2011-07-19 00:00:00
Fixed in Apache Tomcat 6.0.20
2009-06-03 00:00:00
Fixed in Apache Tomcat 5.5.28
2009-09-04 00:00:00
openvas
openvas
Apache Tomcat Multiple Vulnerabilities (Jun 2009)
2009-06-16 00:00:00
Fedora Core 10 FEDORA-2009-11356 (tomcat6)
2009-12-03 00:00:00
SLES10: Security update for Tomcat 5
2009-10-13 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: tomcat6-6.0.20-1.fc10
2009-11-27 21:56:48
[SECURITY] Fedora 11 Update: tomcat6-6.0.20-1.fc11
2009-11-27 21:36:22
[SECURITY] Fedora 12 Update: tomcat6-6.0.20-1.fc12
2009-11-27 21:50:49
ubuntu
ubuntu
Tomcat vulnerabilities
2009-06-15 00:00:00
oraclelinux
oraclelinux
tomcat security update
2009-07-21 00:00:00
centos
centos
tomcat5 security update
2009-07-29 17:30:22
debian
debian
[SECURITY] [DSA 2207-1] tomcat5.5 security update
2011-03-29 22:35:34
ibm
ibm
Security Bulletin: TADDM affected by multiple vulnerabilities due to Apache Tomcat libraries
2023-01-27 10:54:22
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2012-06-24 00:00:00
vmware
vmware
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components.
2009-11-20 00:00:00
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components
2009-11-20 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

0.0005 Low

EPSS

Percentile

18.1%

JSON
Related for OSV:GHSA-HHJG-G8XQ-HHR3
seebug1cvelist2securityvulns4prion2cve2veracode1nvd2ubuntucve2nessus32github2debiancve1osv1redhat8tomcat4openvas45fedora3ubuntu1oraclelinux1centos1debian1ibm1gentoo1vmware2threatpost1