CVE-2007-1355
Description
Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23, and 6.0.0 through 6.0.10 allow remote attackers to inject arbitrary web script or HTML via the test parameter and unspecified vectors.
Risk Information
Base Score
8.6
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
83.3
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Update Tomcat to 9.5.14 | Windows |
| Update Tomcat to 9.5.5 | Windows |
| Update Tomcat to 9.5.7 | Windows |
| Update Tomcat to 9.5.8 | Windows |
| Update Tomcat to 9.6.10 | Windows |
| Update Tomcat to 9.6.3 | Windows |
| Update Tomcat to 9.6.4 | Windows |
| Update Tomcat to 9.6.7 | Windows |
| Update Tomcat to 9.6.8 | Windows |
| Update Tomcat to 2.4.5 | Windows |
| Update Tomcat to 3.0.14 | Windows |
| Update Apache Tomcat to 5.5.24 | Windows |
| Update Apache Tomcat to 5.5.23 | Windows |
| Vulnerabilities CVE-2007-1355 are fixed in Apache - jsp-api 4.1.37 | Windows |
| Vulnerabilities CVE-2007-1355 are fixed in Apache - jsp-api 5.5.24 | Windows |
| Vulnerabilities CVE-2007-1355 are fixed in Apache - jsp-api 6.0.11 | Windows |
| Vulnerabilities CVE-2007-1355 are affected in Apache - jsp-api 5.0.30 | Windows |
| Vulnerabilities CVE-2007-1355 are fixed in Apache - servlet-api 4.1.37 | Windows |
| Vulnerabilities CVE-2007-1355 are fixed in Apache - servlet-api 5.5.24 | Windows |
| Vulnerabilities CVE-2007-1355 are fixed in Apache - servlet-api 6.0.11 | Windows |
| Vulnerabilities CVE-2007-1355 are affected in Apache - servlet-api 5.0.30 | Windows |
| Update Tomcat to 9.5.14 (For Linux) | Linux |
| Update Tomcat to 9.5.5 (For Linux) | Linux |
| Update Tomcat to 9.5.7 (For Linux) | Linux |
| Update Tomcat to 9.5.8 (For Linux) | Linux |
| Update Tomcat to 9.6.10 (For Linux) | Linux |
| Update Tomcat to 9.6.3 (For Linux) | Linux |
| Update Tomcat to 9.6.4 (For Linux) | Linux |
| Update Tomcat to 9.6.7 (For Linux) | Linux |
| Update Tomcat to 9.6.8 (For Linux) | Linux |
| Update Tomcat to 2.4.5 (For Linux) | Linux |
| Update Tomcat to 3.0.14 (For Linux) | Linux |
| Update Apache Tomcat to 5.5.24 (For Linux) | Linux |
| Update Apache Tomcat to 5.5.23 (For Linux) | Linux |
| Vulnerabilities CVE-2007-1355 are fixed in Apache - jsp-api for Linux 4.1.37 | Linux |
| Vulnerabilities CVE-2007-1355 are fixed in Apache - jsp-api for Linux 5.5.24 | Linux |
| Vulnerabilities CVE-2007-1355 are fixed in Apache - jsp-api for Linux 6.0.11 | Linux |
| Vulnerabilities CVE-2007-1355 are affected in Apache - jsp-api for Linux 5.0.30 | Linux |
| Vulnerabilities CVE-2007-1355 are fixed in Apache - servlet-api for Linux 4.1.37 | Linux |
| Vulnerabilities CVE-2007-1355 are fixed in Apache - servlet-api for Linux 5.5.24 | Linux |
| Vulnerabilities CVE-2007-1355 are fixed in Apache - servlet-api for Linux 6.0.11 | Linux |
| Vulnerabilities CVE-2007-1355 are affected in Apache - servlet-api for Linux 5.0.30 | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234