Apache

Tomcat

256 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2007-3386

  • EPSS 73.78%
  • Veröffentlicht 14.08.2007 22:17:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases paramet...

4.3

CVE-2007-3384

  • EPSS 6.42%
  • Veröffentlicht 08.08.2007 01:17:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Multiple cross-site scripting (XSS) vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Value field, related to error messages.

4.3

CVE-2007-3383

  • EPSS 38.83%
  • Veröffentlicht 25.07.2007 17:30:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (examples/jsp/mail/sendmail.jsp) in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remote attackers to inject arbitrary web script or HTML ...

4.3

CVE-2007-2449

  • EPSS 49.09%
  • Veröffentlicht 14.06.2007 23:30:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote att...

3.5

CVE-2007-2450

  • EPSS 1.22%
  • Veröffentlicht 14.06.2007 23:30:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote...

4.3

CVE-2007-1355

Exploit
  • EPSS 82.45%
  • Veröffentlicht 21.05.2007 20:30:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23, and 6.0.0 through 6.0.10 allow remote attacker...

4.3

CVE-2006-7195

  • EPSS 10.88%
  • Veröffentlicht 10.05.2007 00:19:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.

4.3

CVE-2006-7196

  • EPSS 79.91%
  • Veröffentlicht 10.05.2007 00:19:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via...

2.6

CVE-2007-1358

  • EPSS 39.86%
  • Veröffentlicht 10.05.2007 00:19:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform ...

2.6

CVE-2007-1858

  • EPSS 5.09%
  • Veröffentlicht 10.05.2007 00:19:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information o...