Unscored DSA-1593-1 1 CVE

tomcat5.5

Published Jun 9, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 4.0	tomcat5.5	5.5.20-2etch3

Vulnerabilities 1

Medium —

CVE-2008-1947

Apache Tomcat Cross-site scripting (XSS) vulnerability

Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.

org.apache.tomcat:tomcat org.apache.tomcat.embed:tomcat-embed-core Maven

Jun 4, 2008