CVE-2007-2450: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2450?
CVE-2007-2450 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2007-2450?
To address CVE-2007-2450, upgrade to Apache Tomcat version 6.0.14, 5.5.25, or 4.1.37 which contain security fixes.
What applications are affected by CVE-2007-2450?
CVE-2007-2450 affects Apache Tomcat versions 4.0.0 to 6.0.13, including various versions within that range.
Can I mitigate CVE-2007-2450 without upgrading?
Mitigation options for CVE-2007-2450 are limited; the best practice is to apply the recommended upgrades.
What type of vulnerability is CVE-2007-2450?
CVE-2007-2450 is a cross-site scripting (XSS) vulnerability that allows authenticated users to inject arbitrary web scripts.