Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2002-0936 — Apache Tomcat vulnerability

4 documents4 sources

Severity

5.0MEDIUMNVD

EPSS

8.3%

top 7.75%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Apache Tomcat

Timeline

PublishedOct 4

Latest updateApr 30

Description

The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDapache/tomcat4.0.3

🔴Vulnerability Details

GHSA

GHSA-ppj6-9ppm-3h56: The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that↗2022-04-30

▶

CVEList

CVE-2002-0936: The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that↗2002-08-31

▶

💥Exploits & PoCs

Exploit-DB

Apache Tomcat 3/4 - JSP Engine Denial of Service↗2002-06-12

▶