Schweregrad:: Mittel
  CVE Kennungen:: CVE-2007-3384
  Hinweisdatum: 21 Juli 2015

  Beschreibung

Multiple cross-site scripting (XSS) vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Value field, related to error messages.

  Trend Micro Lösungen

Apply associated Trend Micro DPI Rules.

  Lösungen

  Trend Micro Deep Security DPI Rule Number: 1000552
  Trend Micro Deep Security DPI Rule Name: 1000552 - Generic Cross Site Scripting(XSS) Prevention

  Betroffene Software und Version:

  • Apache Tomcat 3.3
  • Apache Tomcat 3.3.1
  • Apache Tomcat 3.3.1a
  • Apache Tomcat 3.3.2