CVE-2008-1947

Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script…

published June 4, 2008

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09776 · 95.5th percentile
Published
2008-06-04T19:17Z
EPSS history
Timeline
  • 04 JUN 19:17Z
    Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script…
    cvelistv5