Test ID:	1.3.6.1.4.1.25623.1.0.148321
Category:	Web Servers
Title:	Apache Tomcat XSS Vulnerability (Jun 2022) - Linux
Summary:	Apache Tomcat is prone to a cross-site scripting (XSS); vulnerability.
Description:	Summary: Apache Tomcat is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability. Affected Software/OS: Apache Tomcat version 8.5.50 through 8.5.81, 9.0.30 through 9.0.64, 10.0.0-M1 through 10.0.22 and 10.1.0-M1 through 10.1.0-M16. Solution: Update to version 8.5.82, 9.0.65, 10.0.23, 10.1.0-M17 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-34305 https://security.gentoo.org/glsa/202208-34 https://lists.apache.org/thread/k04zk0nq6w57m72w5gb0r6z9ryhmvr4k http://www.openwall.com/lists/oss-security/2022/06/23/1
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.