Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2011-0013
4.3
MEDIUMCVSS v2
Published
February 19, 2011
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag.
apache/tomcat
GitHubApache Tomcat
GitHubApache Tomcat= 7.0.1, = 7.0.2, = 7.0.5, = 7.0.0, = 7.0.4, = 7.0.3, = 6.0.6, = 6.0.11, = 6.0.7, = 6.0.4, = 6.0.15, = 6.0.20, = 6.0.10, = 6.0.29, = 6.0.3, = 6.0, = 6.0.14, = 6.0.28, = 6.0.16, = 6.0.13, = 6.0.12, = 6.0.9, = 6.0.17, = 6.0.18, = 6.0.1, = 6.0.0, = 6.0.24, = 6.0.2, = 6.0.8, = 6.0.27, = 6.0.26, = 6.0.5, = 6.0.19, = 5.5.27, = 5.5.18, = 5.5.12, = 5.5.14, = 5.5.10, = 5.5.4, = 5.5.7, = 5.5.1, = 5.5.11, = 5.5.3, = 5.5.22, = 5.5.31, = 5.5.25, = 5.5.28, = 5.5.9, = 5.5.8, = 5.5.15, = 5.5.13, = 5.5.20, = 5.5.0, = 5.5.5, = 5.5.24, = 5.5.2, = 5.5.30, = 5.5.26, = 5.5.6, = 5.5.21, = 5.5.17, = 5.5.16, = 5.5.23, = 5.5.29, = 5.5.19NVD