Read the docs
TI-2006-00245 Aliases CVE-2006-0254GHSA-2jxh-3cx8-xw65

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote…

Priority MEDIUM 44CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · Partial · None
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-79.

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer.

Why it matters now

EPSS 0.32247 98th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Fixed geronimo:geronimo-console-standard (Maven): 1.1Red Hat: 5 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—geronimo:geronimo-console-standard (Maven)before 1.11.1Patch availableGHSA-2jxh-3cx8-xw65
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • geronimo:geronimo-console-standard (Maven) Vendor— Affected before 1.1 Fixed in 1.1 Patch available GHSA-2jxh-3cx8-xw65

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:apache:geronimo:1.0:*:*:*:*:*:*:*1.0VulnerableApache
  • cpe:2.3:a:apache:geronimo:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Apache

Remediation

  • Fix · GHSA-2jxh-3cx8-xw65 geronimo:geronimo-console-standard (Maven) Fixed in 1.1 Advisory →

Red Hat 5 advisories

  • RHSA-2008:0630 Released 2008-08-13 · Red Hat rating Low
    Red Hat Network Satellite Server security update
    • Red Hat Satellite 5.1 (RHEL v.4 AS) jfreechart-0.9.20-3.rhn, mod_perl-2.0.2-12.el4, mod_perl-2.0.2-12.el4.i386 +3
  • RHSA-2008:0524 Released 2008-06-30 · Red Hat rating Low
    Red Hat Network Satellite Server security update
    • Red Hat Satellite v 4.2 (RHEL v.3 AS) jabberd-2.0s10-3.37.rhn.i386, java-1.4.2-ibm-1.4.2.10-1jpp.2.el3.i386, java-1.4.2-ibm-devel-1.4.2.10-1jpp.2.el3.i386 +8
    • Red Hat Satellite v 4.2 (RHEL v.4 AS) jabberd-2.0s10-3.38.rhn.i386, java-1.4.2-ibm-1.4.2.10-1jpp.2.el4.i386, java-1.4.2-ibm-devel-1.4.2.10-1jpp.2.el4.i386 +8
  • RHSA-2008:0261 Released 2008-05-20 · Red Hat rating Moderate
    Red Hat Network Satellite Server security update
    • Red Hat Satellite 5.0 (RHEL v.4 AS) jabberd-2.0s10-3.38.rhn.i386, java-1.4.2-ibm-1.4.2.10-1jpp.2.el4.i386, java-1.4.2-ibm-devel-1.4.2.10-1jpp.2.el4.i386 +8
Show 2 more Red Hat advisories
  • RHSA-2006:0592 Released 2006-07-14 · Red Hat rating Moderate
    tomcat security update for Red Hat Application Server
    • Red Hat Application Server 3AS
  • RHSA-2006:0161 Released 2006-03-07 · Red Hat rating Moderate
    RHAPS security and enhancement update
    • Red Hat Application Server v2 4AS

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Application Server 3ASFixed RHSA-2006:0592
Red Hat Application Server v2 4ASFixed RHSA-2006:0161
Red Hat Satellite 5.0 (RHEL v.4 AS)Fixed RHSA-2008:0261
Red Hat Satellite 5.1 (RHEL v.4 AS)Fixed RHSA-2008:0630
Red Hat Satellite v 4.2 (RHEL v.3 AS)Fixed RHSA-2008:0524
Red Hat Satellite v 4.2 (RHEL v.4 AS)Fixed RHSA-2008:0524

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-0254
  2. 2026-10-03 Alias added: GHSA-2jxh-3cx8-xw65

References

Exploit 2

Advisory 3

Other 6

  • TI-2011-04311 Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without… CVSS 2.0HIGH 7.8
  • TI-2008-05234 Multiple directory traversal vulnerabilities in the web administration console in Apache… CVSS 2.0HIGH 9.4
  • TI-2013-01564 The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM… CVSS 2.0HIGH 10.0
  • TI-2007-04403 The login method in LoginModule implementations in Apache Geronimo 2.0 does not throw… CVSS 2.0HIGH 10.0
  • TI-2009-00039 Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration… CVSS 2.0MEDIUM 6.8
  • TI-2007-05563 SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a… CVSS 2.0HIGH 7.5
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences