NVD

Id
53540  
Name
CVE-2007-1355  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23, and 6.0.0 through 6.0.10 allow remote attackers to inject arbitrary web script or HTML via the test parameter and unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-05-21  
Modified Date
2013-08-24  
Seq
2007-1355  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271245 53540 CVE-2007-1355 http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx  View
271246 53540 CVE-2007-1355 HPSBUX02262  View
271247 53540 CVE-2007-1355 APPLE-SA-2008-06-30  View
271248 53540 CVE-2007-1355 oval:org.mitre.oval:def:6111  View
271249 53540 CVE-2007-1355 RHSA-2008:0630  View
271250 53540 CVE-2007-1355 2722  View
271251 53540 CVE-2007-1355 239312  View
271252 53540 CVE-2007-1355 http://support.apple.com/kb/HT2163  View
271253 53540 CVE-2007-1355 http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540  View
271254 53540 CVE-2007-1355 http://tomcat.apache.org/security-4.html  View
271255 53540 CVE-2007-1355 http://tomcat.apache.org/security-5.html  View
271256 53540 CVE-2007-1355 http://tomcat.apache.org/security-6.html  View
271257 53540 CVE-2007-1355 RHSA-2008:0261  View
271258 53540 CVE-2007-1355 20070519 [CVE-2007-1355] Tomcat documentation XSS vulnerabilities  View
271259 53540 CVE-2007-1355 20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities  View
271260 53540 CVE-2007-1355 20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)  View
271261 53540 CVE-2007-1355 24058  View
271262 53540 CVE-2007-1355 ADV-2007-3386  View
271263 53540 CVE-2007-1355 ADV-2008-1979  View
271264 53540 CVE-2007-1355 ADV-2008-1981  View
271265 53540 CVE-2007-1355 ADV-2009-0233  View
271266 53540 CVE-2007-1355 tomcat-hello-xss(34377)  View
271267 53540 CVE-2007-1355 FEDORA-2007-3456  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51739 JVNDB-2007-000402 Apache Tomcat の hello.jsp サンプルアプリケーションにおけるクロスサイトスクリプティングの脆弱性 Apache Tomcat のサンプルアプリケーションである hello.jsp には、複数のクロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-1355 24710 CVE-2007-1355 53540 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000402.html 2007-05-21 2008-07-11 View