Lucene search
Ubuntu.comUB:CVE-2009-0781HistoryMar 09, 2009 - 12:00 a.m.
CVE-2009-0781
2009-03-0900:00:00
ubuntu.com
ubuntu.com
19
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.162 Low
EPSS
Percentile
96.0%
Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the
calendar application in the examples web application in Apache Tomcat 4.1.0
through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows
remote attackers to inject arbitrary web script or HTML via the time
parameter, related to “invalid HTML.”
Bugs
Notes
| Author | Note |
|---|---|
| mdeslaur | PoC: http://seclists.org/bugtraq/2009/Mar/0054.html |
Related
openvas
openvas
Apache Tomcat cal2.jsp Cross Site Scripting Vulnerability
2009-03-18 00:00:00
SLES10: Security update for Websphere Community Edition
2009-10-13 00:00:00
SLES10: Security update for Websphere Community Edition
2009-10-13 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2019-07-08 13:43:12
Cross-Site Scripting (XSS)
2020-04-10 00:46:42
packetstorm
packetstorm
Apache Tomcat Cross Site Scripting
2009-03-06 00:00:00
nessus
nessus
Apache Tomcat Sample App cal2.jsp time Parameter XSS (CVE-2009-0781)
2004-08-18 00:00:00
Tomcat Sample App cal2.jsp 'time' Parameter XSS
2009-03-09 00:00:00
github
github
Cross-site scripting in Apache Tomcat
2022-05-02 03:18:14
osv
osv
Cross-site scripting in Apache Tomcat
2022-05-02 03:18:14
prion
prion
Cross site scripting
2009-03-09 21:30:00
Cross site scripting
2010-08-05 18:17:00
cve
cve
CVE-2009-0781
2009-03-09 21:30:00
CVE-2009-2696
2010-08-05 18:17:57
securityvulns
securityvulns
Apache Tomcat crossite scripting
2009-03-09 00:00:00
[SECURITY] CVE-2009-0781 XSS in Apache Tomcat examples web application
2009-03-09 00:00:00
cvelist
cvelist
CVE-2009-0781
2009-03-09 21:00:00
CVE-2009-2696
2010-08-05 18:00:00
nvd
nvd
CVE-2009-0781
2009-03-09 21:30:00
CVE-2009-2696
2010-08-05 18:17:57
altlinux
altlinux
Security fix for the ALT Linux 5 package tomcat6 version 0:6.0.18-alt6_8jpp5
2010-01-14 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: tomcat6-6.0.20-1.fc11
2009-11-27 21:36:22
[SECURITY] Fedora 10 Update: tomcat6-6.0.20-1.fc10
2009-11-27 21:56:48
[SECURITY] Fedora 12 Update: tomcat6-6.0.20-1.fc12
2009-11-27 21:50:49
redhat
redhat
(RHSA-2010:0580) Important: tomcat5 security update
2010-08-02 00:00:00
(RHSA-2009:1164) Important: tomcat security update
2009-07-21 00:00:00
(RHSA-2009:1562) Important: tomcat security update
2009-11-09 00:00:00
ubuntu
ubuntu
Tomcat vulnerabilities
2009-06-15 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 6.0.20
2009-06-03 00:00:00
Fixed in Apache Tomcat 5.5.28
2009-09-04 00:00:00
Fixed in Apache Tomcat 4.1.40
2008-12-12 00:00:00
centos
centos
tomcat5 security update
2010-08-03 00:39:04
tomcat5 security update
2009-07-29 17:30:22
oraclelinux
oraclelinux
tomcat security update
2009-07-21 00:00:00
debian
debian
[SECURITY] [DSA 2207-1] tomcat5.5 security update
2011-03-29 22:35:34
ibm
ibm
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2012-06-24 00:00:00
vmware
vmware
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.162 Low
EPSS
Percentile
96.0%
Related for UB:CVE-2009-0781