CVE-2008-1947
Description
Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.
Risk Information
Base Score
8.6
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
59.297
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Update Tomcat to 9.5.14 | Windows |
| Update Tomcat to 9.5.5 | Windows |
| Update Tomcat to 9.5.7 | Windows |
| Update Tomcat to 9.5.8 | Windows |
| Update Tomcat to 9.6.10 | Windows |
| Update Tomcat to 9.6.3 | Windows |
| Update Tomcat to 9.6.4 | Windows |
| Update Tomcat to 9.6.7 | Windows |
| Update Tomcat to 9.6.8 | Windows |
| Update Tomcat to 2.4.5 | Windows |
| Update Tomcat to 3.0.14 | Windows |
| Vulnerabilities CVE-2008-2938,CVE-2008-2370,CVE-2008-1947,CVE-2008-1232 are fixed in Apache - tomcat 5.5.27 | Windows |
| Vulnerabilities CVE-2008-2938,CVE-2008-2370,CVE-2008-1947 are fixed in Apache - tomcat 6.0.18 | Windows |
| Vulnerabilities CVE-2008-1947 are fixed in Apache - tomcat-embed-core 5.5.27 | Windows |
| Vulnerabilities CVE-2008-1947 are fixed in Apache - tomcat-embed-core 6.0.18 | Windows |
| Update Tomcat to 9.5.14 (For Linux) | Linux |
| Update Tomcat to 9.5.5 (For Linux) | Linux |
| Update Tomcat to 9.5.7 (For Linux) | Linux |
| Update Tomcat to 9.5.8 (For Linux) | Linux |
| Update Tomcat to 9.6.10 (For Linux) | Linux |
| Update Tomcat to 9.6.3 (For Linux) | Linux |
| Update Tomcat to 9.6.4 (For Linux) | Linux |
| Update Tomcat to 9.6.7 (For Linux) | Linux |
| Update Tomcat to 9.6.8 (For Linux) | Linux |
| Update Tomcat to 2.4.5 (For Linux) | Linux |
| Update Tomcat to 3.0.14 (For Linux) | Linux |
| Vulnerabilities CVE-2008-2938,CVE-2008-2370,CVE-2008-1947,CVE-2008-1232 are fixed in Apache - tomcat for Linux 5.5.27 | Linux |
| Vulnerabilities CVE-2008-2938,CVE-2008-2370,CVE-2008-1947 are fixed in Apache - tomcat for Linux 6.0.18 | Linux |
| Vulnerabilities CVE-2008-1947 are fixed in Apache - tomcat-embed-core for Linux 5.5.27 | Linux |
| Vulnerabilities CVE-2008-1947 are fixed in Apache - tomcat-embed-core for Linux 6.0.18 | Linux |
| Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability (CVE-2008-1947) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234