Lucene search
Apache TomcatTOMCAT:EF0934F55497A748BA7FEDD04D64B14FHistoryMar 15, 2006 - 12:00 a.m.
Fixed in Apache Tomcat 5.5.16, 5.0.SVN
2006-03-1500:00:00
Apache Tomcat
tomcat.apache.org
17
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.959 High
EPSS
Percentile
99.5%
Low: Cross-site scripting CVE-2006-7196
The calendar application included as part of the JSP examples is susceptible to a cross-site scripting attack as it does not escape user provided data before including it in the returned page.
Affects: 5.0.0-5.0.30, 5.5.0-5.5.15
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache tomcat | ge | 5.0.0 | |
| apache tomcat | le | 5.0.30 | |
| apache tomcat | ge | 5.5.0 | |
| apache tomcat | le | 5.5.15 |
Related
veracode
veracode
Cross-Site Scripting (XSS)
2019-03-25 08:40:41
nessus
nessus
Apache Tomcat Sample App cal2.jsp 'time' Parameter XSS (CVE-2006-7196)
2007-09-24 00:00:00
Apache Tomcat 4.x < 4.1.32 Multiple Vulnerabilities
2010-06-16 00:00:00
SuSE 10 Security Update : Tomcat 5 (ZYPP Patch Number 4990)
2008-02-27 00:00:00
osv
osv
Cross-site scripting in Apache Tomcat
2022-05-01 07:45:38
cve
cve
CVE-2006-7196
2007-05-10 00:19:00
cvelist
cvelist
CVE-2006-7196
2007-05-09 22:00:00
github
github
Cross-site scripting in Apache Tomcat
2022-05-01 07:45:38
nvd
nvd
CVE-2006-7196
2007-05-10 00:19:00
ubuntucve
ubuntucve
CVE-2006-7196
2007-05-10 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 4.1.32
2005-11-06 00:00:00
redhat
redhat
(RHSA-2007:0326) Important: tomcat security update
2007-05-21 00:00:00
(RHSA-2008:0261) Moderate: Red Hat Network Satellite Server security update
2008-05-20 00:00:00
(RHSA-2008:0524) Low: Red Hat Network Satellite Server security update
2008-06-30 00:00:00
securityvulns
securityvulns
openvas
openvas
Ubuntu USN-711-1 (ktorrent)
2009-02-02 00:00:00
Ubuntu USN-712-1 (vim)
2009-02-02 00:00:00
Ubuntu USN-710-1 (xine-lib)
2009-02-02 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.959 High
EPSS
Percentile
99.5%
Related for TOMCAT:EF0934F55497A748BA7FEDD04D64B14F