VDB

GCVE-110-CERTCC-2001-672683

GCVE-110-CERTCC-2001-672683
Advisory Published
Vulnetix · Advisory published July 2, 2001
Web Servers that use the Apache Tomcat Java Servlet Container are vulnerable to a cross-site scripting vulnerability. A web site may inadvertently include malicious HTML tags or script(JavaScript, VBScript, Java, etc.) in a dynamically generated page based on unvalidated input from untrustworthy sources. This can be a problem when a web server does not adequately ensure that generated pages are properly encoded to prevent unintended execution of scripts, and when input is not validated to prevent malicious HTML from being presented to the user.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact15population15exploitation0widely_known20score_current59.0625ease_of_exploitation20

Aliases

CVE-2001-0829

References

Apache Tomcat vulnerable to Cross-Site Scripting via passing of user input directly to default error page
url
Apache Tomcat vulnerable to Cross-Site Scripting via passing of user input directly to default error page
url
Apache Tomcat vulnerable to Cross-Site Scripting via passing of user input directly to default error page
advisory
Apache Tomcat vulnerable to Cross-Site Scripting via passing of user input directly to default error page
advisory
Apache Tomcat vulnerable to Cross-Site Scripting via passing of user input directly to default error page
advisory
Apache Tomcat vulnerable to Cross-Site Scripting via passing of user input directly to default error page
advisory

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›