EPSS
Percentile
80.5%
apache tomcat is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject arbitrary Javascript into a victim’s browser via the Name or Value parameter in the error messages.
Name
Value
osvdb.org/39035
securityreason.com/securityalert/2971
securitytracker.com/id?1018503
tomcat.apache.org/security-3.html
www.securityfocus.com/archive/1/475321/100/0/threaded
www.securityfocus.com/bid/25174