Lucene search
Ubuntu.comUB:CVE-2007-1355HistoryMay 21, 2007 - 12:00 a.m.
CVE-2007-1355
2007-05-2100:00:00
ubuntu.com
ubuntu.com
18
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.103
Percentile
95.0%
Multiple cross-site scripting (XSS) vulnerabilities in the
appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through
4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23,
and 6.0.0 through 6.0.10 allow remote attackers to inject arbitrary web
script or HTML via the test parameter and unspecified vectors.
Related
tomcat
tomcat
Fixed in Apache Tomcat 5.5.24, 5.0.SVN
2007-03-08 00:00:00
Fixed in Apache Tomcat 6.0.11
2005-06-30 00:00:00
Fixed in Apache Tomcat 4.1.37
2005-10-06 00:00:00
openvas
openvas
FreeBSD Ports: apache-tomcat
2008-09-04 00:00:00
FreeBSD Ports: apache-tomcat
2008-09-04 00:00:00
cvelist
cvelist
CVE-2007-1355
2007-05-21 20:00:00
nessus
nessus
Tomcat Sample App hello.jsp 'test' Parameter XSS
2007-05-21 00:00:00
FreeBSD : tomcat -- XSS vulnerability in sample applications (ab2575d6-39f0-11dc-b8cc-000fea449b8a)
2007-07-27 00:00:00
Apache Tomcat < 6.0.13 Multiple Vulnerabilities
2011-11-18 00:00:00
nvd
nvd
CVE-2007-1355
2007-05-21 20:30:00
freebsd
freebsd
tomcat -- XSS vulnerability in sample applications
2007-05-19 00:00:00
securityvulns
securityvulns
[CVE-2007-1355] Tomcat documentation XSS vulnerabilities
2007-05-19 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2019-03-25 08:40:43
packetstorm
packetstorm
CVE-2007-1355.txt
2007-05-22 00:00:00
prion
prion
Cross site scripting
2007-05-21 20:30:00
cve
cve
CVE-2007-1355
2007-05-21 20:30:00
exploitdb
exploitdb
altlinux
altlinux
fedora
fedora
[SECURITY] Fedora 7 Update: tomcat5-5.5.25-1jpp.1.fc7
2007-11-17 05:34:43
[SECURITY] Fedora 8 Update: tomcat5-5.5.25-1jpp.1.fc8
2007-11-17 05:37:36
[SECURITY] Fedora 8 Update: tomcat5-5.5.26-1jpp.2.fc8
2008-02-13 05:14:35
redhat
redhat
(RHSA-2008:0630) Low: Red Hat Network Satellite Server security update
2008-08-13 00:00:00
(RHSA-2008:0261) Moderate: Red Hat Network Satellite Server security update
2008-05-20 00:00:00
(RHSA-2008:0524) Low: Red Hat Network Satellite Server security update
2008-06-30 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.103
Percentile
95.0%
Related for UB:CVE-2007-1355