CVE-2003-0044 — Cross-site Scripting in Apache Tomcat

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
6.8MEDIUMNVD
EPSS
27.3%
top 3.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apache Tomcat
Timeline
PublishedFeb 7
Latest updateApr 29

Description

Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDapache/tomcat10 versions+9

Patches

Patch: www.debian.org ↗Patch: www.debian.org ↗

🔴Vulnerability Details

3
GHSA
Jakarta Tomcat cross-site scripting (XSS) vulnerability↗2022-04-29
▶
OSV
Jakarta Tomcat cross-site scripting (XSS) vulnerability↗2022-04-29
▶
CVEList
CVE-2003-0044: Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3↗2003-01-29
▶
CVE-2003-0044 — Cross-site Scripting in Apache Tomcat | cvebase