Vulnerability & Exploit Database

Back to search

Apache Tomcat Cross-Site Scripting in the hello.jsp Example Application

Severity CVSS Published Added Modified
4 (AV:N/AC:M/Au:N/C:N/I:P/A:N) May 19, 2007 August 04, 2007 February 13, 2015

Description

Multiple cross-site scripting vulnerabilities exist in the appdev/sample/web/hello.jsp example application that comes with Apache Tomcat. This allows remote attackers to inject arbitrary web script or HTML via the test parameter and unspecified vectors.

Scan For This Vulnerability

Use our top-rated tool to discover, prioritize, and remediate your vulnerabilities

 Free InsightVM Trial

References

Solution

tomcat-6x-upgrade-6_0_11

Related Vulnerabilities