{"id":"CVE-2007-2449","published":"2007-06-14T23:00:00Z","modified":"2024-08-07T13:42:33Z","title":"Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character, as demonstrated by a URI containing a \"snp/snoop.jsp;\" sequence.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is a set of cross-site scripting vulnerabilities in several JSP files of the examples web application shipped with Apache Tomcat. An attacker can inject arbitrary script or HTML through the part of the URI after a ';' character, as shown by a crafted URI containing a \"snp/snoop.jsp;\" sequence, and the attack requires a victim to be lured into requesting that URL.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:16:37Z"},"cvss":null,"epss":{"score":0.77376,"percentile":0.99555,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":1,"pulses":[{"name":"UPX executable packer.","url":"https://otx.alienvault.com/pulse/663d2869e0f3a42bbddc42ff","created":"2024-05-09"}],"provenance":"machine"},"cwes":[],"references":[{"url":"http://tomcat.apache.org/security-4.html","tags":["x_refsource_CONFIRM"]},{"url":"http://support.apple.com/kb/HT2163","tags":["x_refsource_CONFIRM"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0630.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://www.securityfocus.com/bid/24476","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://secunia.com/advisories/31493","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/471351/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://securityreason.com/securityalert/2804","tags":["third-party-advisory","x_refsource_SREASON"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0569.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34869","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.securityfocus.com/archive/1/500412/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.securitytracker.com/id?1018245","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://secunia.com/advisories/33668","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/29392","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/500396/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","tags":["vendor-advisory","x_refsource_APPLE"]},{"url":"http://www.vupen.com/english/advisories/2009/0233","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://tomcat.apache.org/security-6.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.vupen.com/english/advisories/2007/3386","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://secunia.com/advisories/30802","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/27037","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://secunia.com/advisories/27727","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://tomcat.apache.org/security-5.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0261.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://osvdb.org/36080","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10578","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://secunia.com/advisories/26076","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2007/2213","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx","tags":["x_refsource_CONFIRM"]},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540","tags":["x_refsource_CONFIRM"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:241","tags":["vendor-advisory","x_refsource_MANDRIVA"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"Maven","package":"org.apache.tomcat:tomcat","vulnerableRanges":[">=4.0.0, <=4.0.6",">=5.0.0, <=5.0.30",">=5.5.0, <=5.5.24",">=6.0.0, <=6.0.13"],"patched":[],"from":["GHSA-hc39-rjwp-qffq"],"provenance":"source"}],"advisories":[{"id":"GHSA-hc39-rjwp-qffq","url":"https://github.com/advisories/GHSA-hc39-rjwp-qffq","severity":"MODERATE","ecosystem":"Maven","package":"org.apache.tomcat:tomcat","vulnerableRanges":[">=4.0.0, <=4.0.6"],"patched":[],"provenance":"source","from":"GHSA"},{"id":"GHSA-hc39-rjwp-qffq","url":"https://github.com/advisories/GHSA-hc39-rjwp-qffq","severity":"MODERATE","ecosystem":"Maven","package":"org.apache.tomcat:tomcat","vulnerableRanges":[">=5.0.0, <=5.0.30"],"patched":[],"provenance":"source","from":"GHSA"},{"id":"GHSA-hc39-rjwp-qffq","url":"https://github.com/advisories/GHSA-hc39-rjwp-qffq","severity":"MODERATE","ecosystem":"Maven","package":"org.apache.tomcat:tomcat","vulnerableRanges":[">=5.5.0, <=5.5.24"],"patched":[],"provenance":"source","from":"GHSA"},{"id":"GHSA-hc39-rjwp-qffq","url":"https://github.com/advisories/GHSA-hc39-rjwp-qffq","severity":"MODERATE","ecosystem":"Maven","package":"org.apache.tomcat:tomcat","vulnerableRanges":[">=6.0.0, <=6.0.13"],"patched":[],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2022-4122","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4122","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":30189,"url":"https://www.exploit-db.com/exploits/30189","title":"Apache Tomcat 6.0.13 - JSP Example Web Applications Cross-Site Scripting","type":"webapps","platform":"jsp","date":"2007-06-14","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2007-06-14"},"nuclei":[{"id":"CVE-2007-2449","name":"Apache Tomcat 4.x-7.x - Cross-Site Scripting","severity":"medium","path":"http/cves/2007/CVE-2007-2449.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-2449.yaml"}],"first":{"date":"2007-06-14","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/30189"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2007-06-14","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2007-2449","provenance":"source"},{"date":"2007-06-14","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-30189)","url":"https://www.exploit-db.com/exploits/30189","provenance":"source"}],"speed":{"daysToPublicExploit":0,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":25.6,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.91,"detail":"percentile 0.9956"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 Exploit-DB entry; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}