CVE-2007-3384

EPSS 2.82%
Published 08.08.2007 01:17:00
Last modified 09.04.2025 00:30:58
Source secalert@redhat.com
Teams watchlist Login
Open Login

Multiple cross-site scripting (XSS) vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Value field, related to error messages.

Affected products Warnungen 0 Metrics 2 CWE 0 References 9

Data is provided by the National Vulnerability Database (NVD)

Apache ≫ Tomcat Version3.3

Apache ≫ Tomcat Version3.3.1

Apache ≫ Tomcat Version3.3.1a

Apache ≫ Tomcat Version3.3.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	2.82%	0.848

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://osvdb.org/39035

http://securityreason.com/securityalert/2971

http://securitytracker.com/id?1018503

http://tomcat.apache.org/security-3.html

http://www.securityfocus.com/archive/1/475321/100/0/threaded

http://www.securityfocus.com/bid/25174

Patch

https://nvd.nist.gov/vuln/detail/CVE-2007-3384

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-3384

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-3384

EUVD