NVD

Id
54617  
Name
CVE-2007-2450  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-06-14  
Modified Date
2011-03-07  
Seq
2007-2450  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
277206 54617 CVE-2007-2450 http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx  View
277207 54617 CVE-2007-2450 HPSBUX02262  View
277208 54617 CVE-2007-2450 JVN#07100457  View
277209 54617 CVE-2007-2450 APPLE-SA-2008-06-30  View
277210 54617 CVE-2007-2450 SUSE-SR:2009:004  View
277211 54617 CVE-2007-2450 oval:org.mitre.oval:def:11287  View
277212 54617 CVE-2007-2450 2813  View
277213 54617 CVE-2007-2450 239312  View
277214 54617 CVE-2007-2450 http://support.apple.com/kb/HT2163  View
277215 54617 CVE-2007-2450 http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540  View
277216 54617 CVE-2007-2450 http://tomcat.apache.org/security-4.html  View
277217 54617 CVE-2007-2450 http://tomcat.apache.org/security-5.html  View
277218 54617 CVE-2007-2450 http://tomcat.apache.org/security-6.html  View
277219 54617 CVE-2007-2450 DSA-1468  View
277220 54617 CVE-2007-2450 MDKSA-2007:241  View
277221 54617 CVE-2007-2450 RHSA-2007:0569  View
277222 54617 CVE-2007-2450 RHSA-2008:0261  View
277223 54617 CVE-2007-2450 20070614 [CVE-2007-2450]: Apache Tomcat XSS vulnerability in Manager  View
277224 54617 CVE-2007-2450 20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities  View
277225 54617 CVE-2007-2450 20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)  View
277226 54617 CVE-2007-2450 24475  View
277227 54617 CVE-2007-2450 1018245  View
277228 54617 CVE-2007-2450 ADV-2007-2213  View
277229 54617 CVE-2007-2450 ADV-2007-3386  View
277230 54617 CVE-2007-2450 ADV-2008-1979  View
277231 54617 CVE-2007-2450 ADV-2008-1981  View
277232 54617 CVE-2007-2450 ADV-2009-0233  View
277233 54617 CVE-2007-2450 tomcat-hostmanager-xss(34868)  View
277234 54617 CVE-2007-2450 FEDORA-2007-3456  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51794 JVNDB-2007-000457 Apache Tomcat におけるクロスサイトスクリプティングの脆弱性 The Apache Software Foundation が提供する Apache Tomcat には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-2450 25805 CVE-2007-2450 54617 2.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000457.html 2007-06-14 2008-07-11 View