CVE-2007-1355: XSS

Q: What is the severity of CVE-2007-1355?

CVE-2007-1355 is classified as a medium severity vulnerability due to its potential to allow cross-site scripting attacks.

Q: How do I fix CVE-2007-1355?

To fix CVE-2007-1355, upgrade your Apache Tomcat installation to the latest version that is not vulnerable.

Q: What are the affected versions in CVE-2007-1355?

CVE-2007-1355 affects Apache Tomcat versions 4.0.0 through 6.0.10.

Q: What types of attacks can CVE-2007-1355 facilitate?

CVE-2007-1355 allows remote attackers to inject arbitrary web scripts or HTML, leading to potential exploitation through cross-site scripting.

Q: Is CVE-2007-1355 easy to exploit?

Yes, CVE-2007-1355 is relatively easy to exploit due to the nature of cross-site scripting vulnerabilities.

Published May 21, 2007

Updated

Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23, and 6.0.0 through 6.0.10 allow remote attackers to inject arbitrary web script or HTML via the test parameter and unspecified vectors.

Affected Software

62 affected componentsFixes available

Apache Tomcat=4.0.0

Apache Tomcat=4.0.1

Apache Tomcat=4.0.2

Apache Tomcat=4.0.3

Apache Tomcat=4.0.4

Apache Tomcat=4.0.5

Apache Tomcat=4.0.6

Apache Tomcat=4.1.10

Apache Tomcat=4.1.15

Apache Tomcat=4.1.24

Apache Tomcat=4.1.28

Apache Tomcat=4.1.31

Apache Tomcat=5.0.1

Apache Tomcat=5.0.2

Apache Tomcat=5.0.3

Apache Tomcat=5.0.4

Apache Tomcat=5.0.5

Apache Tomcat=5.0.6

Apache Tomcat=5.0.7

Apache Tomcat=5.0.8

Apache Tomcat=5.0.9

Apache Tomcat=5.0.10

Apache Tomcat=5.0.11

Apache Tomcat=5.0.12

Apache Tomcat=5.0.13

Apache Tomcat=5.0.14

Apache Tomcat=5.0.15

Apache Tomcat=5.0.16

Apache Tomcat=5.0.17

Apache Tomcat=5.0.18

Apache Tomcat=5.0.19

Apache Tomcat=5.0.21

Apache Tomcat=5.0.22

Apache Tomcat=5.0.23

Apache Tomcat=5.0.24

Apache Tomcat=5.0.25

Apache Tomcat=5.0.26

Apache Tomcat=5.0.27

Apache Tomcat=5.0.28

Apache Tomcat=5.0.29

Apache Tomcat=5.0.30

Apache Tomcat=6.0.0

Apache Tomcat=6.0.1

Apache Tomcat=6.0.2

Apache Tomcat=6.0.3

Apache Tomcat=6.0.4

Apache Tomcat=6.0.5

Apache Tomcat=6.0.6

Apache Tomcat=6.0.7

Apache Tomcat=6.0.8

Apache Tomcat=6.0.9

Apache Tomcat=6.0.10

maven/org.apache.tomcat:servlet-api>=4.0.0<=4.0.6

maven/org.apache.tomcat:servlet-api>=5.0.0<=5.0.30

maven/org.apache.tomcat:servlet-api>=6.0.0<6.0.11

6.0.11

maven/org.apache.tomcat:servlet-api>=5.5.0<5.5.24

5.5.24

maven/org.apache.tomcat:servlet-api>=4.1.0<4.1.37

4.1.37

maven/org.apache.tomcat:jsp-api>=4.0.0<=4.0.6

maven/org.apache.tomcat:jsp-api>=5.0.0<=5.0.30

maven/org.apache.tomcat:jsp-api>=6.0.0<6.0.11

6.0.11

maven/org.apache.tomcat:jsp-api>=5.5.0<5.5.24

5.5.24

maven/org.apache.tomcat:jsp-api>=4.1.0<4.1.37

4.1.37

Remediation

Patch Available

http://www.securityfocus.com/bid/24058

Event History

May 21, 2007

CVE Published

08:30 PM

May 22, 2007

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

May 1, 2022

Advisory Published

via GitHub·05:52 PM

Frequently Asked Questions

What is the severity of CVE-2007-1355?

CVE-2007-1355 is classified as a medium severity vulnerability due to its potential to allow cross-site scripting attacks.

How do I fix CVE-2007-1355?