NVD

Id
53543  
Name
CVE-2007-1358  
Description
Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616".  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-05-09  
Modified Date
2013-07-22  
Seq
2007-1358  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271281 53543 CVE-2007-1358 http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx  View
271282 53543 CVE-2007-1358 http://docs.info.apple.com/article.html?artnum=306172  View
271283 53543 CVE-2007-1358 HPSBUX02262  View
271284 53543 CVE-2007-1358 JVN#16535199  View
271285 53543 CVE-2007-1358 APPLE-SA-2007-07-31  View
271286 53543 CVE-2007-1358 oval:org.mitre.oval:def:10679  View
271287 53543 CVE-2007-1358 RHSA-2008:0630  View
271288 53543 CVE-2007-1358 239312  View
271289 53543 CVE-2007-1358 http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540  View
271290 53543 CVE-2007-1358 http://tomcat.apache.org/security-4.html  View
271291 53543 CVE-2007-1358 http://www.fujitsu.com/global/support/software/security/products-f/interstage-200704e.html  View
271292 53543 CVE-2007-1358 RHSA-2008:0261  View
271293 53543 CVE-2007-1358 20070618 [CVE-2007-1358] Apache Tomcat XSS vulnerability in Accept-Language header processing  View
271294 53543 CVE-2007-1358 20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities  View
271295 53543 CVE-2007-1358 20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)  View
271296 53543 CVE-2007-1358 24524  View
271297 53543 CVE-2007-1358 25159  View
271298 53543 CVE-2007-1358 1018269  View
271299 53543 CVE-2007-1358 ADV-2007-1729  View
271300 53543 CVE-2007-1358 ADV-2007-2732  View
271301 53543 CVE-2007-1358 ADV-2007-3087  View
271302 53543 CVE-2007-1358 ADV-2007-3386  View
271303 53543 CVE-2007-1358 ADV-2008-1979  View
271304 53543 CVE-2007-1358 ADV-2009-0233  View
271305 53543 CVE-2007-1358 FEDORA-2007-3456  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51634 JVNDB-2007-000297 Apache Tomcat の Accept-Language ヘッダの処理に関するクロスサイトスクリプティングの脆弱性 The Apache Software Foundation が提供する Apache Tomcat には、Accept-Language ヘッダの処理に関するクロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-1358 24713 CVE-2007-1358 53543 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000297.html 2007-05-09 2008-07-11 View