CVE-2006-7196
Description
Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly unspecified other vectors. NOTE: this may be related to CVE-2006-0254.1.
Risk Information
Base Score
8.6
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
78.528
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Update Tomcat to 9.5.14 | Windows |
| Update Tomcat to 9.5.5 | Windows |
| Update Tomcat to 9.5.7 | Windows |
| Update Tomcat to 9.5.8 | Windows |
| Update Tomcat to 9.6.10 | Windows |
| Update Tomcat to 9.6.3 | Windows |
| Update Tomcat to 9.6.4 | Windows |
| Update Tomcat to 9.6.7 | Windows |
| Update Tomcat to 9.6.8 | Windows |
| Update Tomcat to 2.4.5 | Windows |
| Update Tomcat to 3.0.14 | Windows |
| Update Apache Tomcat to 5.5.13 | Windows |
| Update Apache Tomcat to 5.5.16 | Windows |
| Vulnerabilities CVE-2006-7196 are fixed in Apache - tomcat 4.0.7 | Windows |
| Vulnerabilities CVE-2006-7196 are fixed in Apache - tomcat 4.1.32 | Windows |
| Vulnerabilities CVE-2006-7196 are fixed in Apache - tomcat 5.0.31 | Windows |
| Vulnerabilities CVE-2006-7196 are fixed in Apache - tomcat 5.5.16 | Windows |
| Update Tomcat to 9.5.14 (For Linux) | Linux |
| Update Tomcat to 9.5.5 (For Linux) | Linux |
| Update Tomcat to 9.5.7 (For Linux) | Linux |
| Update Tomcat to 9.5.8 (For Linux) | Linux |
| Update Tomcat to 9.6.10 (For Linux) | Linux |
| Update Tomcat to 9.6.3 (For Linux) | Linux |
| Update Tomcat to 9.6.4 (For Linux) | Linux |
| Update Tomcat to 9.6.7 (For Linux) | Linux |
| Update Tomcat to 9.6.8 (For Linux) | Linux |
| Update Tomcat to 2.4.5 (For Linux) | Linux |
| Update Tomcat to 3.0.14 (For Linux) | Linux |
| Update Apache Tomcat to 5.5.13 (For Linux) | Linux |
| Update Apache Tomcat to 5.5.16 (For Linux) | Linux |
| Vulnerabilities CVE-2006-7196 are fixed in Apache - tomcat for Linux 4.0.7 | Linux |
| Vulnerabilities CVE-2006-7196 are fixed in Apache - tomcat for Linux 4.1.32 | Linux |
| Vulnerabilities CVE-2006-7196 are fixed in Apache - tomcat for Linux 5.0.31 | Linux |
| Vulnerabilities CVE-2006-7196 are fixed in Apache - tomcat for Linux 5.5.16 | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234