CVE-2007-3101

Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6 allow remote attackers to inject…

published June 18, 2007

CVSS

—

EPSS

44%

Percentile

98.8

In the wild

Unconfirmed

What it is

Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6 allow remote attackers to inject arbitrary web script via the autoscroll parameter, which is injected into Javascript that is sent to the client.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.44453 · 98.8th percentile
Published: 2007-06-18T10:00Z

EPSS history

Timeline

18 JUN 10:00Z
Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6 allow remote attackers to inject…
cvelistv5