CVE-2007-2450
The MITRE CVE dictionary describes this issue as:
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.
Find out more about CVE-2007-2450 from the MITRE CVE dictionary dictionary and NIST NVD.
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| Red Hat Satellite 5.0 (RHEL v.4 AS) | RHSA-2008:0261 | 2008-05-20 |
| Red Hat Application Server v2 4AS (tomcat5) | RHSA-2007:0876 | 2007-10-11 |
| Red Hat Satellite v 4.2 (RHEL v.4 AS) | RHSA-2008:0524 | 2008-06-30 |
| Red Hat Enterprise Linux 5 (tomcat5) | RHSA-2007:0569 | 2007-07-17 |
| Red Hat Satellite v 4.2 (RHEL v.3 AS) | RHSA-2008:0524 | 2008-06-30 |
CVE description copyright © 2017, The MITRE Corporation