CVE-2006-7195

Apache Tomcat 5.0.0-5.0.30 and 5.5.0-5.5.17 - Cross-Site Scripting via Header Values

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.

References (17)

Core 17
Core References
Various Sources mailing-list x_refsource_mlist
http://lists.vmware.com/pipermail/security-announce/2008/000003.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/33668
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28365
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0327.html
Various Sources x_refsource_confirm
http://tomcat.apache.org/security-5.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10514
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0261.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/28481
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0065
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/500412/100/0/threaded
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/485938/100/0/threaded
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/500396/100/0/threaded
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1729
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/0233

Scores

EPSS 0.0548
EPSS Percentile 91.9%

Details

Status published
Products (38)
apache/tomcat 5.0.0
apache/tomcat 5.0.1
apache/tomcat 5.0.2
apache/tomcat 5.0.10
apache/tomcat 5.0.11
apache/tomcat 5.0.12
apache/tomcat 5.0.13
apache/tomcat 5.0.14
apache/tomcat 5.0.15
apache/tomcat 5.0.16
... and 28 more
Published May 10, 2007
Tracked Since Feb 18, 2026