Home > Vulnerability Database > CVE-2011-0013

Mend.io Vulnerability Database

CVE-2011-0013

Good to know:

Date: February 18, 2011

Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag.

Language: Java

Severity Score

3.7

Related Resources (37)

Url: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html

Url: http://securityreason.com/securityalert/8093

Url: https://access.redhat.com/security/cve/CVE-2011-0013

Url: http://secunia.com/advisories/43192

Url: http://www.redhat.com/support/errata/RHSA-2011-1845.html

Url: http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html

Url: http://marc.info/?l=bugtraq&m=139344343412337&w=2

Url: http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2011:030

Url: http://secunia.com/advisories/45022

Url: http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.30

Url: https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E

Url: http://www.securitytracker.com/id?1025026

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2011-0013

Url: http://www.vupen.com/english/advisories/2011/0376

Url: http://www.redhat.com/support/errata/RHSA-2011-0896.html

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12878

Url: https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E

Url: http://secunia.com/advisories/57126

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19269

Url: http://support.apple.com/kb/HT5002

Url: http://marc.info/?l=bugtraq&m=132215163318824&w=2

Url: https://bugzilla.redhat.com/show_bug.cgi?id=675786

Url: http://marc.info/?l=bugtraq&m=136485229118404&w=2

Url: http://www.redhat.com/support/errata/RHSA-2011-0791.html

Url: http://www.redhat.com/support/errata/RHSA-2011-0897.html

Url: https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E

Url: https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E

Url: https://nvd.nist.gov/vuln/detail/CVE-2011-0013

Url: http://marc.info/?l=bugtraq&m=130168502603566&w=2

Url: http://tomcat.apache.org/security-5.html#Fixed_in_Apache_Tomcat_5.5.32

Url: http://www.debian.org/security/2011/dsa-2160

Url: http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.6_%28released_14_Jan_2011%29

Url: http://www.securityfocus.com/bid/46174

Url: http://www.securityfocus.com/archive/1/516209/30/90/threaded

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14945

Url: https://www.mend.io/vulnerability-database/CVE-2011-0013

Severity Score

3.7

Weakness Type (CWE)

Cross-Site Scripting (XSS)

CWE-79

Top Fix

Upgrade Version

Upgrade to version org.apache.tomcat:tomcat-catalina:7.0.6,org.apache.tomcat:catalina:6.0.30

Learn More

CVSS v3.1

Base Score:	3.7
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2011-0013

Good to know:

Date: February 18, 2011

Language: Java

Severity Score

Related Resources (37)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v3.1

CVSS v2

Do you need more information?