Read the docs
TI-2007-01301 Aliases CVE-2007-1358GHSA-xmc9-6p56-3c4v

Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat…

Priority LOW 32CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
High
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · Partial · None
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-79.

Summary

Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616".

Why it matters now

EPSS 0.19889 97th percentileScored 2026-11-07
Fix Fixed Red Hat: 9 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—org.apache.tomcat:tomcat (Maven)4.0.0 – 4.0.6—No fix listedGHSA-xmc9-6p56-3c4v
—org.apache.tomcat:tomcat (Maven)4.1.0 – 4.1.34—No fix listedGHSA-xmc9-6p56-3c4v
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • org.apache.tomcat:tomcat (Maven) Vendor— Affected 4.0.0 – 4.0.6 Fixed in — No fix listed GHSA-xmc9-6p56-3c4v
  • org.apache.tomcat:tomcat (Maven) Vendor— Affected 4.1.0 – 4.1.34 Fixed in — No fix listed GHSA-xmc9-6p56-3c4v

CPE configurations NVD · 9

CPEVersionsRoleVendor
cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*up to 4.1.31VulnerableApache
cpe:2.3:a:apache:tomcat:4.0.0:*:*:*:*:*:*:*4.0.0VulnerableApache
cpe:2.3:a:apache:tomcat:4.0.1:*:*:*:*:*:*:*4.0.1VulnerableApache
cpe:2.3:a:apache:tomcat:4.0.2:*:*:*:*:*:*:*4.0.2VulnerableApache
cpe:2.3:a:apache:tomcat:4.0.3:*:*:*:*:*:*:*4.0.3VulnerableApache
cpe:2.3:a:apache:tomcat:4.0.4:*:*:*:*:*:*:*4.0.4VulnerableApache
cpe:2.3:a:apache:tomcat:4.0.5:*:*:*:*:*:*:*4.0.5VulnerableApache
cpe:2.3:a:apache:tomcat:4.0.6:*:*:*:*:*:*:*4.0.6VulnerableApache
cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*4.1.0VulnerableApache
  • cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* Versions up to 4.1.31 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:4.0.0:*:*:*:*:*:*:* Versions 4.0.0 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:4.0.3:*:*:*:*:*:*:* Versions 4.0.3 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:4.0.4:*:*:*:*:*:*:* Versions 4.0.4 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:4.0.5:*:*:*:*:*:*:* Versions 4.0.5 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:4.0.6:*:*:*:*:*:*:* Versions 4.0.6 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:* Versions 4.1.0 Vulnerable ·Apache

Remediation

Red Hat 9 advisories

  • RHSA-2010:0602 Released 2010-08-04 · Red Hat rating Moderate
    Red Hat Certificate System 7.3 security update
    • Red Hat Certificate System 7.3 for 4AS ant-1.6.5-1jpp_1rh, avalon-logkit-1.2-2jpp_4rh, axis-1.2.1-1jpp_3rh +39
    • Red Hat Certificate System 7.3 for 4ES ant-1.6.5-1jpp_1rh, avalon-logkit-1.2-2jpp_4rh, axis-1.2.1-1jpp_3rh +39
  • RHSA-2008:0630 Released 2008-08-13 · Red Hat rating Low
    Red Hat Network Satellite Server security update
    • Red Hat Satellite 5.1 (RHEL v.4 AS) jfreechart-0.9.20-3.rhn, mod_perl-2.0.2-12.el4, mod_perl-2.0.2-12.el4.i386 +3
  • RHSA-2008:0524 Released 2008-06-30 · Red Hat rating Low
    Red Hat Network Satellite Server security update
    • Red Hat Satellite v 4.2 (RHEL v.3 AS) jabberd-2.0s10-3.37.rhn.i386, java-1.4.2-ibm-1.4.2.10-1jpp.2.el3.i386, java-1.4.2-ibm-devel-1.4.2.10-1jpp.2.el3.i386 +8
    • Red Hat Satellite v 4.2 (RHEL v.4 AS) jabberd-2.0s10-3.38.rhn.i386, java-1.4.2-ibm-1.4.2.10-1jpp.2.el4.i386, java-1.4.2-ibm-devel-1.4.2.10-1jpp.2.el4.i386 +8
Show 6 more Red Hat advisories
  • RHSA-2008:0261 Released 2008-05-20 · Red Hat rating Moderate
    Red Hat Network Satellite Server security update
    • Red Hat Satellite 5.0 (RHEL v.4 AS) jabberd-2.0s10-3.38.rhn.i386, java-1.4.2-ibm-1.4.2.10-1jpp.2.el4.i386, java-1.4.2-ibm-devel-1.4.2.10-1jpp.2.el4.i386 +8
  • RHSA-2007:0876 Released 2007-10-11 · Red Hat rating Moderate
    tomcat security update
    • Red Hat Application Server v2 4AS tomcat5-5.5.23-0jpp_4rh.4, tomcat5-admin-webapps-5.5.23-0jpp_4rh.4, tomcat5-common-lib-5.5.23-0jpp_4rh.4 +8
    • Red Hat Application Server v2 4ES tomcat5-5.5.23-0jpp_4rh.4, tomcat5-admin-webapps-5.5.23-0jpp_4rh.4, tomcat5-common-lib-5.5.23-0jpp_4rh.4 +8
    • Red Hat Application Server v2 4WS tomcat5-5.5.23-0jpp_4rh.4, tomcat5-admin-webapps-5.5.23-0jpp_4rh.4, tomcat5-common-lib-5.5.23-0jpp_4rh.4 +8
  • RHSA-2007:0360 Released 2007-05-24 · Red Hat rating Important
    jbossas security update
    • Red Hat Application Stack v1 for Enterprise Linux AS (v.4) jbossas-4.0.5-2.CP04.el4s1.2
    • Red Hat Application Stack v1 for Enterprise Linux ES (v.4) jbossas-4.0.5-2.CP04.el4s1.2
  • RHSA-2007:0328 Released 2007-05-24 · Red Hat rating Important
    tomcat security update
    • Red Hat Developer Suite v.3 (AS v.4) jakarta-commons-modeler-2.0-3jpp_3rh, tomcat5-5.5.23-0jpp_6rh, tomcat5-common-lib-5.5.23-0jpp_6rh +4
  • RHSA-2007:0326 Released 2007-05-21 · Red Hat rating Important
    tomcat security update
    • Red Hat Application Server v2 4AS jakarta-commons-modeler-2.0-3jpp_2rh, jakarta-commons-modeler-javadoc-2.0-3jpp_2rh, tomcat5-5.5.23-0jpp_4rh.3 +10
    • Red Hat Application Server v2 4ES jakarta-commons-modeler-2.0-3jpp_2rh, jakarta-commons-modeler-javadoc-2.0-3jpp_2rh, tomcat5-5.5.23-0jpp_4rh.3 +10
    • Red Hat Application Server v2 4WS jakarta-commons-modeler-2.0-3jpp_2rh, jakarta-commons-modeler-javadoc-2.0-3jpp_2rh, tomcat5-5.5.23-0jpp_4rh.3 +10
  • RHSA-2007:0327 Released 2007-05-14 · Red Hat rating Important
    tomcat security update
    • Red Hat Enterprise Linux (v. 5 server) jakarta-commons-modeler-1.1-8jpp.1.0.2.el5, jakarta-commons-modeler-1.1-8jpp.1.0.2.el5.i386, jakarta-commons-modeler-1.1-8jpp.1.0.2.el5.ia64 +47
    • Red Hat Enterprise Linux Desktop (v. 5 client) tomcat5-5.5.23-0jpp.1.0.3.el5, tomcat5-jsp-2.0-api-5.5.23-0jpp.1.0.3.el5, tomcat5-jsp-2.0-api-5.5.23-0jpp.1.0.3.el5.i386 +2
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) jakarta-commons-modeler-1.1-8jpp.1.0.2.el5, jakarta-commons-modeler-1.1-8jpp.1.0.2.el5.i386, jakarta-commons-modeler-javadoc-1.1-8jpp.1.0.2.el5 +19

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Application Server v2 4ASFixed RHSA-2007:0326, RHSA-2007:0876
Red Hat Application Server v2 4ESFixed RHSA-2007:0326, RHSA-2007:0876
Red Hat Application Server v2 4WSFixed RHSA-2007:0326, RHSA-2007:0876
Red Hat Application Stack v1 for Enterprise Linux AS (v.4)Fixed RHSA-2007:0360
Red Hat Application Stack v1 for Enterprise Linux ES (v.4)Fixed RHSA-2007:0360
Red Hat Certificate System 7.3 for 4ASFixed RHSA-2010:0602
Red Hat Certificate System 7.3 for 4ESFixed RHSA-2010:0602
Red Hat Developer Suite v.3 (AS v.4)Fixed RHSA-2007:0328
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2007:0327
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2007:0327
Red Hat Enterprise Linux Desktop Workstation (v. 5 client)Fixed RHSA-2007:0327
Red Hat Satellite 5.0 (RHEL v.4 AS)Fixed RHSA-2008:0261
Red Hat Satellite 5.1 (RHEL v.4 AS)Fixed RHSA-2008:0630
Red Hat Satellite v 4.2 (RHEL v.3 AS)Fixed RHSA-2008:0524
Red Hat Satellite v 4.2 (RHEL v.4 AS)Fixed RHSA-2008:0524
Not affected: 2 products
  • Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
  • Red Hat Application Stack v1 for Enterprise Linux ES (v.4)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-1358
  2. 2026-10-03 Alias added: GHSA-xmc9-6p56-3c4v

References

Advisory 9

Other 18

  • TI-2025-18529 Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT KEVCVSS 3.1CRITICAL 10.0
  • TI-2020-01862 Improper privilege management in Apache Tomcat KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-07192 Improper access control in Apache Tomcat KEVCVSS 3.1CRITICAL 9.8
  • TI-2017-09342 Unrestricted file upload in Apache Tomcat KEVCVSS 3.1HIGH 8.1
  • TI-2017-09340 Unrestricted file upload in Apache Tomcat KEVCVSS 3.1HIGH 8.1
  • TI-2026-26741 Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor KEVCVSS 3.1HIGH 7.5
See all 273 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences