NVD

Id
1192  
Name
CVE-2008-1232  
Description
Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-03-18  
Published
2008-08-03  
Modified Date
2017-03-15  
Seq
2008-1232  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
7421 1192 CVE-2008-1232 http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-02-ca-service-desk-tomcat-cross-site-scripting-vulnerability.aspx  View
7422 1192 CVE-2008-1232 APPLE-SA-2008-10-09  View
7423 1192 CVE-2008-1232 SUSE-SR:2008:018  View
7424 1192 CVE-2008-1232 SUSE-SR:2009:004  View
7425 1192 CVE-2008-1232 SSRT090005  View
7426 1192 CVE-2008-1232 HPSBST02955  View
7427 1192 CVE-2008-1232 oval:org.mitre.oval:def:11181  View
7428 1192 CVE-2008-1232 oval:org.mitre.oval:def:5985  View
7429 1192 CVE-2008-1232 4098  View
7430 1192 CVE-2008-1232 http://support.apple.com/kb/HT3216  View
7431 1192 CVE-2008-1232 http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm  View
7432 1192 CVE-2008-1232 http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209500  View
7433 1192 CVE-2008-1232 http://tomcat.apache.org/security-4.html  View
7434 1192 CVE-2008-1232 http://tomcat.apache.org/security-5.html  View
7435 1192 CVE-2008-1232 http://tomcat.apache.org/security-6.html  View
7436 1192 CVE-2008-1232 MDVSA-2008:188  View
7437 1192 CVE-2008-1232 RHSA-2008:0648  View
7438 1192 CVE-2008-1232 RHSA-2008:0862  View
7439 1192 CVE-2008-1232 RHSA-2008:0864  View
7440 1192 CVE-2008-1232 20080801 [CVE-2008-1232] Apache Tomcat XSS vulnerability  View
7441 1192 CVE-2008-1232 20090616 CA20090615-02: CA Service Desk Tomcat Cross Site Scripting Vulnerability  View
7442 1192 CVE-2008-1232 20090806 CA20090806-02: Security Notice for Unicenter Asset Portfolio Management, Unicenter Desktop and Server Management, Unicenter Patch Management  View
7443 1192 CVE-2008-1232 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
7444 1192 CVE-2008-1232 30496  View
7445 1192 CVE-2008-1232 31681  View
7446 1192 CVE-2008-1232 1020622  View
7447 1192 CVE-2008-1232 http://www.vmware.com/security/advisories/VMSA-2009-0002.html  View
7448 1192 CVE-2008-1232 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
7449 1192 CVE-2008-1232 ADV-2008-2305  View
7450 1192 CVE-2008-1232 ADV-2008-2780  View
7451 1192 CVE-2008-1232 ADV-2008-2823  View
7452 1192 CVE-2008-1232 ADV-2009-0320  View
7453 1192 CVE-2008-1232 ADV-2009-0503  View
7454 1192 CVE-2008-1232 ADV-2009-1609  View
7455 1192 CVE-2008-1232 ADV-2009-2194  View
7456 1192 CVE-2008-1232 ADV-2009-3316  View
7457 1192 CVE-2008-1232 tomcat-httpservletresponse-xss(44155)  View
7458 1192 CVE-2008-1232 https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209500  View
7459 1192 CVE-2008-1232 https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214095  View
7460 1192 CVE-2008-1232 FEDORA-2008-7977  View
7461 1192 CVE-2008-1232 FEDORA-2008-8113  View
7462 1192 CVE-2008-1232 FEDORA-2008-8130  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46297 JVNDB-2008-001607 Apache Tomcat の HttpServletResponse.sendError メソッドに関するクロスサイトスクリプティングの脆弱性 Apache Tomcat には、HttpServletResponse.sendError メソッドへの message 引数の取り扱いに不備があり、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1232 31345 CVE-2008-1232 1192 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001607.html 2008-08-03 2015-03-26 View