NVD

Id
48100  
Name
CVE-2009-0781  
Description
Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-03-09  
Modified Date
2016-08-22  
Seq
2009-0781  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241429 48100 CVE-2009-0781 APPLE-SA-2010-03-29-1  View
241430 48100 CVE-2009-0781 SUSE-SR:2009:012  View
241431 48100 CVE-2009-0781 SSRT100029  View
241432 48100 CVE-2009-0781 SSRT100203  View
241433 48100 CVE-2009-0781 SSRT100825  View
241434 48100 CVE-2009-0781 HPSBUX02860  View
241435 48100 CVE-2009-0781 oval:org.mitre.oval:def:11041  View
241436 48100 CVE-2009-0781 oval:org.mitre.oval:def:19345  View
241437 48100 CVE-2009-0781 oval:org.mitre.oval:def:6564  View
241438 48100 CVE-2009-0781 263529  View
241439 48100 CVE-2009-0781 http://support.apple.com/kb/HT4077  View
241440 48100 CVE-2009-0781 http://tomcat.apache.org/security-4.html  View
241441 48100 CVE-2009-0781 http://tomcat.apache.org/security-5.html  View
241442 48100 CVE-2009-0781 http://tomcat.apache.org/security-6.html  View
241443 48100 CVE-2009-0781 DSA-2207  View
241444 48100 CVE-2009-0781 MDVSA-2009:136  View
241445 48100 CVE-2009-0781 MDVSA-2009:138  View
241446 48100 CVE-2009-0781 20090306 [SECURITY] CVE-2009-0781 XSS in Apache Tomcat examples web application  View
241447 48100 CVE-2009-0781 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
241448 48100 CVE-2009-0781 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
241449 48100 CVE-2009-0781 ADV-2009-1856  View
241450 48100 CVE-2009-0781 ADV-2009-3316  View
241451 48100 CVE-2009-0781 ADV-2010-3056  View
241452 48100 CVE-2009-0781 tomcat-cal2-xss(49213)  View
241453 48100 CVE-2009-0781 FEDORA-2009-11374  View
241454 48100 CVE-2009-0781 FEDORA-2009-11352  View
241455 48100 CVE-2009-0781 FEDORA-2009-11356  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40109 JVNDB-2009-001115 Apache Tomcat のサンプル用 calendar アプリケーションにおけるクロスサイトスクリプティングの脆弱性 Apache Tomcat のサンプル用 calendar アプリケーションには、time パラメータの処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-0781 38212 CVE-2009-0781 48100 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001115.html 2009-03-09 2012-09-28 View