CVE-2007-1355

Scores

EPSS

0.833high83.3%
0%20%40%60%80%100%

Percentile: 83.3%

CVSS

4.3medium2.0
0246810

CVSS Score: 4.3/10

All CVSS Scores

CVSS 2.0
4.3

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23, and 6.0.0 through 6.0.10 allow remote attackers to inject arbitrary web script or HTML via the test parameter and unspecified vectors.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

debiannvdredhat

CWEs

CWE-79

Exploits

Exploit ID: 30052

Source: exploitdb

URL: https://www.exploit-db.com/exploits/30052

Vulnerable Software (39)

Type: Configuration

Product: jabberd

Operating System: rhel

Trait:
{  "fixed": "2.0s10-3.38.rhn"}

Source: redhat

Type: Configuration

Product: jabberd

Operating System: rhel

Trait:
{  "fixed": "2.0s10-3.37.rhn"}

Source: redhat

Type: Configuration

Product: jabberd

Operating System: rhel

Trait:
{  "fixed": "2.0s10-3.38.rhn"}

Source: redhat

Type: Configuration

Product: java-1.4.2-ibm

Operating System: rhel

Trait:
{  "fixed": "1.4.2.10-1jpp.2.el4"}

Source: redhat

Type: Configuration

Product: java-1.4.2-ibm

Operating System: rhel

Trait:
{  "fixed": "1.4.2.10-1jpp.2.el3"}

Source: redhat

Type: Configuration

Product: java-1.4.2-ibm

Operating System: rhel

Trait:
{  "fixed": "1.4.2.10-1jpp.2.el4"}

Source: redhat

Type: Configuration

Product: jfreechart

Operating System: rhel

Trait:
{  "fixed": "0.9.20-3.rhn"}

Source: redhat

Type: Configuration

Product: jfreechart

Operating System: rhel

Trait:
{  "fixed": "0.9.20-3.rhn"}

Source: redhat

Type: Configuration

Product: jfreechart

Operating System: rhel

Trait:
{  "fixed": "0.9.20-3.rhn"}

Source: redhat

Type: Configuration

Product: jfreechart

Operating System: rhel

Trait:
{  "fixed": "0.9.20-3.rhn"}

Source: redhat

Type: Configuration

Product: mod_perl

Operating System: rhel

Trait:
{  "fixed": "2.0.2-12.el4"}

Source: redhat

Type: Configuration

Product: openmotif21

Operating System: rhel

Trait:
{  "fixed": "2.1.30-11.RHEL4.6"}

Source: redhat

Type: Configuration

Product: openmotif21

Operating System: rhel

Trait:
{  "fixed": "2.1.30-9.RHEL3.8"}

Source: redhat

Type: Configuration

Product: openmotif21

Operating System: rhel

Trait:
{  "fixed": "2.1.30-11.RHEL4.6"}

Source: redhat

Type: Configuration

Product: perl-Crypt-CBC

Operating System: rhel

Trait:
{  "fixed": "2.24-1.el4"}

Source: redhat

Type: Configuration

Product: perl-Crypt-CBC

Operating System: rhel

Trait:
{  "fixed": "2.24-1.el3"}

Source: redhat

Type: Configuration

Product: perl-Crypt-CBC

Operating System: rhel

Trait:
{  "fixed": "2.24-1.el4"}

Source: redhat

Type: Configuration

Product: perl-Crypt-CBC

Operating System: rhel

Trait:
{  "fixed": "2.24-1.el4"}

Source: redhat

Type: Configuration

Product: rhn-apache

Operating System: rhel

Trait:
{  "fixed": "1.3.27-36.rhn.rhel3"}

Source: redhat

Type: Configuration

Product: rhn-apache

Operating System: rhel

Trait:
{  "fixed": "1.3.27-36.rhn.rhel4"}

Source: redhat