CVE-2003-0044

Published: Feb 7, 2003Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML.

Affected (10)

Products: Apache: Tomcat

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Apache Tomcat	Version 3.0
Apache Tomcat	Version 3.1.1
Apache Tomcat	Version 3.1
Apache Tomcat	Version 3.2.1
Apache Tomcat	Version 3.2.3
Apache Tomcat	Version 3.2.4
Apache Tomcat	Version 3.2
Apache Tomcat	Version 3.3.1
Apache Tomcat	Version 3.3.1a
Apache Tomcat	Version 3.3

References (20)

http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/

Source: cve@mitre.org

Vendor Advisory

http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/7972

Source: cve@mitre.org

http://www.ciac.org/ciac/bulletins/n-060.shtml

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-246

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/9203

Source: cve@mitre.org

http://www.osvdb.org/9204

Source: cve@mitre.org

http://www.securityfocus.com/advisories/5111

Source: cve@mitre.org

http://www.securityfocus.com/bid/6720

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/11196

Source: cve@mitre.org

http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/7972

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ciac.org/ciac/bulletins/n-060.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2003/dsa-246

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.osvdb.org/9203

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/9204

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/advisories/5111

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/6720

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/11196

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.