NVD

Id
54616  
Name
CVE-2007-2449  
Description
Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ";" character, as demonstrated by a URI containing a "snp/snoop.jsp;" sequence.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-06-14  
Modified Date
2012-10-30  
Seq
2007-2449  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
277179 54616 CVE-2007-2449 http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx  View
277180 54616 CVE-2007-2449 HPSBUX02262  View
277181 54616 CVE-2007-2449 APPLE-SA-2008-06-30  View
277182 54616 CVE-2007-2449 SUSE-SR:2008:007  View
277183 54616 CVE-2007-2449 SUSE-SR:2009:004  View
277184 54616 CVE-2007-2449 oval:org.mitre.oval:def:10578  View
277185 54616 CVE-2007-2449 RHSA-2008:0630  View
277186 54616 CVE-2007-2449 2804  View
277187 54616 CVE-2007-2449 http://support.apple.com/kb/HT2163  View
277188 54616 CVE-2007-2449 http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540  View
277189 54616 CVE-2007-2449 http://tomcat.apache.org/security-4.html  View
277190 54616 CVE-2007-2449 http://tomcat.apache.org/security-5.html  View
277191 54616 CVE-2007-2449 http://tomcat.apache.org/security-6.html  View
277192 54616 CVE-2007-2449 MDKSA-2007:241  View
277193 54616 CVE-2007-2449 RHSA-2007:0569  View
277194 54616 CVE-2007-2449 RHSA-2008:0261  View
277195 54616 CVE-2007-2449 20070614 [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples  View
277196 54616 CVE-2007-2449 20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities  View
277197 54616 CVE-2007-2449 20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)  View
277198 54616 CVE-2007-2449 24476  View
277199 54616 CVE-2007-2449 1018245  View
277200 54616 CVE-2007-2449 ADV-2007-2213  View
277201 54616 CVE-2007-2449 ADV-2007-3386  View
277202 54616 CVE-2007-2449 ADV-2008-1981  View
277203 54616 CVE-2007-2449 ADV-2009-0233  View
277204 54616 CVE-2007-2449 tomcat-example-xss(34869)  View
277205 54616 CVE-2007-2449 FEDORA-2007-3456  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51793 JVNDB-2007-000456 Apache Tomcat 付属のサンプルプログラムにおけるクロスサイトスクリプティングの脆弱性 The Apache Software Foundation が提供する Apache Tomcat 付属のサンプルプログラムには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-2449 25804 CVE-2007-2449 54616 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000456.html 2007-06-15 2008-07-11 View