NVD

Id
55535  
Name
CVE-2007-3383  
Description
Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (examples/jsp/mail/sendmail.jsp) in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remote attackers to inject arbitrary web script or HTML via the From field and possibly other fields, related to generation of error messages.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-07-25  
Modified Date
2011-03-07  
Seq
2007-3383  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
282256 55535 CVE-2007-3383 APPLE-SA-2008-06-30  View
282257 55535 CVE-2007-3383 20070721 CVE-2007-3383: XSS in Tomcat send mail example  View
282258 55535 CVE-2007-3383 2918  View
282259 55535 CVE-2007-3383 http://support.apple.com/kb/HT2163  View
282260 55535 CVE-2007-3383 http://tomcat.apache.org/security-4.html  View
282261 55535 CVE-2007-3383 VU#862600  View
282262 55535 CVE-2007-3383 20070721 CVE-2007-3383: XSS in Tomcat send mail example  View
282263 55535 CVE-2007-3383 24999  View
282264 55535 CVE-2007-3383 ADV-2007-2618  View
282265 55535 CVE-2007-3383 ADV-2008-1981  View
282266 55535 CVE-2007-3383 tomcat-sendmail-example-xss(35536)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51884 JVNDB-2007-000547 Apache Tomcat の SendMailServlet におけるクロスサイトスクリプティングの脆弱性 Apache Tomcat のサンプルアプリケーションの SendMailServlet (examples/jsp/mail/sendmail.jsp) には、From フィールドの入力値のチェック処理に不備が存在するために、エラーメッセージを介してクロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-3383 26738 CVE-2007-3383 55535 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000547.html 2007-07-21 2008-07-11 View