NVD

Id
55538  
Name
CVE-2007-3386  
Description
Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-08-14  
Modified Date
2011-03-07  
Seq
2007-3386  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
282304 55538 CVE-2007-3386 http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx  View
282305 55538 CVE-2007-3386 SSRT071447  View
282306 55538 CVE-2007-3386 SSRT071472  View
282307 55538 CVE-2007-3386 JVN#59851336  View
282308 55538 CVE-2007-3386 SUSE-SR:2009:004  View
282309 55538 CVE-2007-3386 oval:org.mitre.oval:def:10077  View
282310 55538 CVE-2007-3386 3010  View
282311 55538 CVE-2007-3386 1018558  View
282312 55538 CVE-2007-3386 http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540  View
282313 55538 CVE-2007-3386 http://tomcat.apache.org/security-6.html  View
282314 55538 CVE-2007-3386 DSA-1447  View
282315 55538 CVE-2007-3386 MDKSA-2007:241  View
282316 55538 CVE-2007-3386 RHSA-2007:0871  View
282317 55538 CVE-2007-3386 20070814 CVE-2007-3386: XSS in Host Manager  View
282318 55538 CVE-2007-3386 20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities  View
282319 55538 CVE-2007-3386 20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)  View
282320 55538 CVE-2007-3386 25314  View
282321 55538 CVE-2007-3386 ADV-2007-2880  View
282322 55538 CVE-2007-3386 ADV-2007-3386  View
282323 55538 CVE-2007-3386 ADV-2007-3527  View
282324 55538 CVE-2007-3386 ADV-2009-0233  View
282325 55538 CVE-2007-3386 tomcat-hostmanager-alias-xss(36001)  View
282326 55538 CVE-2007-3386 FEDORA-2007-3456  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51935 JVNDB-2007-000598 Apache Tomcat の Host Manager におけるクロスサイトスクリプティングの脆弱性 The Apache Software Foundation が提供する Apache Tomcat には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-3386 26741 CVE-2007-3386 55538 2.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000598.html 2007-08-15 2007-12-11 View