Myfaces Tomahawk

myfaces_tomahawk

Vendor: Apache • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2007-3101

1Apache

1Myfaces Tomahawk

Apr 23, 2026

Jun 18, 2007

N/A· v4

N/A· v3

4.3 MEDIUM· v2

Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6 allow remote attackers to inject arbitrary web script via the autoscroll parameter, which is injecte...Show more