Логотип exploitDog
bind:"CVE-2007-2449" OR bind:"CVE-2007-2450"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2007-2449" OR bind:"CVE-2007-2450"

Количество 11

Количество 11

oracle-oval логотип

ELSA-2007-0569

больше 18 лет назад

ELSA-2007-0569: Moderate: tomcat security update (MODERATE)

EPSS: Низкий
ubuntu логотип

CVE-2007-2450

больше 18 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.

CVSS2: 3.5
EPSS: Низкий
redhat логотип

CVE-2007-2450

больше 18 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.

EPSS: Низкий
nvd логотип

CVE-2007-2450

больше 18 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.

CVSS2: 3.5
EPSS: Низкий
debian логотип

CVE-2007-2450

больше 18 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager ...

CVSS2: 3.5
EPSS: Низкий
ubuntu логотип

CVE-2007-2449

больше 18 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character, as demonstrated by a URI containing a "snp/snoop.jsp;" sequence.

CVSS2: 4.3
EPSS: Средний
redhat логотип

CVE-2007-2449

больше 18 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character, as demonstrated by a URI containing a "snp/snoop.jsp;" sequence.

EPSS: Средний
nvd логотип

CVE-2007-2449

больше 18 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character, as demonstrated by a URI containing a "snp/snoop.jsp;" sequence.

CVSS2: 4.3
EPSS: Средний
debian логотип

CVE-2007-2449

больше 18 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in certain JSP fil ...

CVSS2: 4.3
EPSS: Средний
github логотип

GHSA-hc39-rjwp-qffq

почти 4 года назад

Apache Tomcat XSS Vulnerabilities in Examples Web Application

EPSS: Средний
github логотип

GHSA-5c5p-jxvx-x7j2

почти 4 года назад

Apache Tomcat vulnerable to Cross-site Scripting

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
oracle-oval логотип
ELSA-2007-0569

ELSA-2007-0569: Moderate: tomcat security update (MODERATE)

больше 18 лет назад
ubuntu логотип
CVE-2007-2450

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.

CVSS2: 3.5
1%
Низкий
больше 18 лет назад
redhat логотип
CVE-2007-2450

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.

1%
Низкий
больше 18 лет назад
nvd логотип
CVE-2007-2450

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.

CVSS2: 3.5
1%
Низкий
больше 18 лет назад
debian логотип
CVE-2007-2450

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager ...

CVSS2: 3.5
1%
Низкий
больше 18 лет назад
ubuntu логотип
CVE-2007-2449

Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character, as demonstrated by a URI containing a "snp/snoop.jsp;" sequence.

CVSS2: 4.3
47%
Средний
больше 18 лет назад
redhat логотип
CVE-2007-2449

Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character, as demonstrated by a URI containing a "snp/snoop.jsp;" sequence.

47%
Средний
больше 18 лет назад
nvd логотип
CVE-2007-2449

Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character, as demonstrated by a URI containing a "snp/snoop.jsp;" sequence.

CVSS2: 4.3
47%
Средний
больше 18 лет назад
debian логотип
CVE-2007-2449

Multiple cross-site scripting (XSS) vulnerabilities in certain JSP fil ...

CVSS2: 4.3
47%
Средний
больше 18 лет назад
github логотип
GHSA-hc39-rjwp-qffq

Apache Tomcat XSS Vulnerabilities in Examples Web Application

47%
Средний
почти 4 года назад
github логотип
GHSA-5c5p-jxvx-x7j2

Apache Tomcat vulnerable to Cross-site Scripting

1%
Низкий
почти 4 года назад

Уязвимостей на страницу