Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-PM78-WXXF-FW98
HistoryMay 01, 2022 - 7:45 a.m.

Cross-site scripting in Apache Tomcat

2022-05-0107:45:38
Google
osv.dev
18
apache tomcat
cross-site scripting
vulnerability
remote attackers
arbitrary web script
html
cve-2006-0254.

EPSS

0.958

Percentile

99.5%

JSON

Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly unspecified other vectors. NOTE: this may be related to CVE-2006-0254.1.

References

Related

ubuntucve 1
nvd 2
github 2
cve 2
cvelist 2
exploitdb 3
veracode 1
nessus 8
tomcat 2
osv 1
prion 1
redhat 5
ibm 1
securityvulns 1
openvas 3
ubuntucve
ubuntucve
CVE-2006-7196
2007-05-10 00:00:00
nvd
nvd
CVE-2006-7196
2007-05-10 00:19:00
CVE-2006-0254
2006-01-18 01:51:00
github
github
Cross-site scripting in Apache Tomcat
2022-05-01 07:45:38
Apache Geronimo console 1.0 vulnerable to cross-site scripting
2022-05-01 06:38:20
cve
cve
CVE-2006-7196
2007-05-10 00:19:00
CVE-2006-0254
2006-01-18 02:00:00
cvelist
cvelist
CVE-2006-7196
2007-05-09 22:00:00
CVE-2006-0254
2006-01-18 02:00:00
exploitdb
exploitdb
Apache Tomcat 5.5.15 - cal2.jsp Cross-Site Scripting
2007-09-04 00:00:00
Apache Tomcat / Geronimo 1.0 - 'Sample Script cal2.jsp?time' Cross-Site Scripting
2006-01-16 00:00:00
Apache Geronimo 1.0 - Error Page Cross-Site Scripting
2006-01-16 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2019-03-25 08:40:41
nessus
nessus
Apache Tomcat Sample App cal2.jsp 'time' Parameter XSS (CVE-2006-7196)
2007-09-24 00:00:00
Apache Tomcat / Geronimo Sample Script cal2.jsp time Parameter XSS
2006-01-18 00:00:00
Apache Tomcat 4.x < 4.1.32 Multiple Vulnerabilities
2010-06-16 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 5.5.16, 5.0.SVN
2006-03-15 00:00:00
Fixed in Apache Tomcat 4.1.32
2005-11-06 00:00:00
osv
osv
Apache Geronimo console 1.0 vulnerable to cross-site scripting
2022-05-01 06:38:20
prion
prion
Cross site scripting
2006-01-18 01:51:00
redhat
redhat
(RHSA-2006:0161) RHAPS security and enhancement update
2006-03-07 00:00:00
(RHSA-2007:0326) Important: tomcat security update
2007-05-21 00:00:00
(RHSA-2008:0630) Low: Red Hat Network Satellite Server security update
2008-08-13 00:00:00
ibm
ibm
Security Bulletin: Multiple Security Vulnerabilities in Apache Geronimo Affect IBM Sterling B2B Integrator
2020-02-05 00:53:36
securityvulns
securityvulns
CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities &#40;Updated - v1.1&#41;
2009-01-28 00:00:00
openvas
openvas
Ubuntu USN-712-1 (vim)
2009-02-02 00:00:00
Ubuntu USN-711-1 (ktorrent)
2009-02-02 00:00:00
Ubuntu USN-710-1 (xine-lib)
2009-02-02 00:00:00

EPSS

0.958

Percentile

99.5%

JSON
Related for OSV:GHSA-PM78-WXXF-FW98
ubuntucve1nvd2github2cve2cvelist2exploitdb3veracode1nessus8tomcat2osv1prion1redhat5ibm1securityvulns1openvas3