Red Hat Security AdvisoryRHSA-2007:0569
tomcat security update
Released 2007-07-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) tomcat5-5.5.23-0jpp.1.0.4.el5, tomcat5-5.5.23-0jpp.1.0.4.el5.i386, tomcat5-5.5.23-0jpp.1.0.4.el5.ia64 +41
- Red Hat Enterprise Linux Desktop (v. 5 client) tomcat5-5.5.23-0jpp.1.0.4.el5, tomcat5-jsp-2.0-api-5.5.23-0jpp.1.0.4.el5, tomcat5-jsp-2.0-api-5.5.23-0jpp.1.0.4.el5.i386 +2
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) tomcat5-5.5.23-0jpp.1.0.4.el5, tomcat5-5.5.23-0jpp.1.0.4.el5.i386, tomcat5-admin-webapps-5.5.23-0jpp.1.0.4.el5 +15
Fixes 2 records
Priority MEDIUM 59
Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 t…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.77376 · Published 2007-06-14 · Fixed
Priority LOW 23
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.03291 · Published 2007-06-14 · Fixed in 4.1.37, 5.5.25 +1 CWE-79
