Most recent entries from all

certa-2007-avi-267 — Une vulnérabilité dans les applications d'administration de Tomcat et dans des exemples d'a…

2026-10-03T18:36:54.703709+00:00

certa-2007-avi-267

EUVD-2026-134481

2026-10-03T18:36:54.703763+00:00

EUVD-2026-134481

fkie_cve-2007-2449

2026-10-03T18:36:54.703789+00:00

Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character, as demonstrated by a URI containing a "snp/snoop.jsp;" sequence.

GHSA-hc39-rjwp-qffq — Apache Tomcat XSS Vulnerabilities in Examples Web Application

2026-10-03T18:36:54.703835+00:00

Affected: Maven: org.apache.tomcat:tomcat

Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the `;` character, as demonstrated by a URI containing a `snp/snoop.jsp;` sequence.

gsd-2007-2449

2026-10-03T18:36:54.703881+00:00

gsd-2007-2449

jvndb-2007-000456

2026-10-03T18:36:54.703904+00:00

Apache Tomcat, from the Apache Software Foundation, contains a cross-site scripting vulnerability in its sample program. Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page (JSP) technologies. jsp-examples, a sample web application included in Apache Tomcat, contains a cross-site scripting vulnerability.

RHSA-2007:0569 — Red Hat Security Advisory: tomcat security update

2026-10-03T18:36:54.703936+00:00

tomcat examples jsp XSS tomcat host manager XSS