Vulnetix
Try Vulnetix Request Demo
CVE-2009-2696 PUBLISHED CVSS 4.300000190734863 MEDIUM

Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML." NOTE: this is due to a missing fix for CVE-2009-0781.

EPSS 0.88% · 75.2th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
0.88%
75.2th percentile

Affected Products

VendorProductVersions
n/an/an/a
apachetomcat0

Timeline

References

Open in Interactive Console →