2017-10-16 12:31:07 -04:00
{
2023-02-02 17:01:48 +00:00
"data_version" : "4.0" ,
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
2019-03-18 01:08:29 +00:00
"CVE_data_meta" : {
"ID" : "CVE-2010-4172" ,
2023-02-02 17:01:48 +00:00
"ASSIGNER" : "secalert@redhat.com" ,
2019-03-18 01:08:29 +00:00
"STATE" : "PUBLIC"
} ,
2023-02-02 17:01:48 +00:00
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2023-02-13 04:04:47 +00:00
"value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications."
2023-02-02 17:01:48 +00:00
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
2023-02-13 04:04:47 +00:00
"value" : "n/a"
2023-02-02 17:01:48 +00:00
}
]
}
]
} ,
2019-03-18 01:08:29 +00:00
"affects" : {
"vendor" : {
"vendor_data" : [
{
2023-02-13 04:04:47 +00:00
"vendor_name" : "n/a" ,
2019-03-18 01:08:29 +00:00
"product" : {
"product_data" : [
{
2023-02-13 04:04:47 +00:00
"product_name" : "n/a" ,
2023-02-02 17:01:48 +00:00
"version" : {
"version_data" : [
{
2023-02-13 04:04:47 +00:00
"version_affected" : "=" ,
"version_value" : "n/a"
2019-03-18 01:08:29 +00:00
}
]
}
}
]
2023-02-02 17:01:48 +00:00
}
2019-03-18 01:08:29 +00:00
}
2017-10-16 12:31:07 -04:00
]
2019-03-18 01:08:29 +00:00
}
} ,
"references" : {
"reference_data" : [
{
2023-02-02 17:01:48 +00:00
"url" : "http://tomcat.apache.org/security-6.html" ,
"refsource" : "MISC" ,
"name" : "http://tomcat.apache.org/security-6.html"
} ,
{
"url" : "http://www.redhat.com/support/errata/RHSA-2011-0896.html" ,
"refsource" : "MISC" ,
"name" : "http://www.redhat.com/support/errata/RHSA-2011-0896.html"
} ,
{
"url" : "http://www.redhat.com/support/errata/RHSA-2011-0897.html" ,
"refsource" : "MISC" ,
"name" : "http://www.redhat.com/support/errata/RHSA-2011-0897.html"
} ,
2019-03-18 01:08:29 +00:00
{
2023-02-02 17:01:48 +00:00
"url" : "http://tomcat.apache.org/security-7.html" ,
"refsource" : "MISC" ,
"name" : "http://tomcat.apache.org/security-7.html"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://marc.info/?l=bugtraq&m=139344343412337&w=2" ,
"refsource" : "MISC" ,
"name" : "http://marc.info/?l=bugtraq&m=139344343412337&w=2"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://secunia.com/advisories/57126" ,
"refsource" : "MISC" ,
"name" : "http://secunia.com/advisories/57126"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html" ,
"refsource" : "MISC" ,
"name" : "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://support.apple.com/kb/HT5002" ,
"refsource" : "MISC" ,
"name" : "http://support.apple.com/kb/HT5002"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://secunia.com/advisories/45022" ,
"refsource" : "MISC" ,
"name" : "http://secunia.com/advisories/45022"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html" ,
"refsource" : "MISC" ,
"name" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://www.redhat.com/support/errata/RHSA-2011-0791.html" ,
"refsource" : "MISC" ,
"name" : "http://www.redhat.com/support/errata/RHSA-2011-0791.html"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://archives.neohapsis.com/archives/fulldisclosure/2010-11/0285.html" ,
"refsource" : "MISC" ,
"name" : "http://archives.neohapsis.com/archives/fulldisclosure/2010-11/0285.html"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://secunia.com/advisories/42337" ,
"refsource" : "MISC" ,
"name" : "http://secunia.com/advisories/42337"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://secunia.com/advisories/43019" ,
"refsource" : "MISC" ,
"name" : "http://secunia.com/advisories/43019"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://securitytracker.com/id?1024764" ,
"refsource" : "MISC" ,
"name" : "http://securitytracker.com/id?1024764"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://svn.apache.org/viewvc?view=revision&revision=1037778" ,
"refsource" : "MISC" ,
"name" : "http://svn.apache.org/viewvc?view=revision&revision=1037778"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://svn.apache.org/viewvc?view=revision&revision=1037779" ,
"refsource" : "MISC" ,
"name" : "http://svn.apache.org/viewvc?view=revision&revision=1037779"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://www.securityfocus.com/archive/1/514866/100/0/threaded" ,
"refsource" : "MISC" ,
"name" : "http://www.securityfocus.com/archive/1/514866/100/0/threaded"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://www.securityfocus.com/bid/45015" ,
"refsource" : "MISC" ,
"name" : "http://www.securityfocus.com/bid/45015"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://www.ubuntu.com/usn/USN-1048-1" ,
"refsource" : "MISC" ,
"name" : "http://www.ubuntu.com/usn/USN-1048-1"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://www.vupen.com/english/advisories/2010/3047" ,
"refsource" : "MISC" ,
"name" : "http://www.vupen.com/english/advisories/2010/3047"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "http://www.vupen.com/english/advisories/2011/0203" ,
"refsource" : "MISC" ,
"name" : "http://www.vupen.com/english/advisories/2011/0203"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-13 04:04:47 +00:00
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/63422" ,
2023-02-02 17:01:48 +00:00
"refsource" : "MISC" ,
2023-02-13 04:04:47 +00:00
"name" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/63422"
2019-03-18 01:08:29 +00:00
} ,
{
2023-02-02 17:01:48 +00:00
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=656246" ,
"refsource" : "MISC" ,
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=656246"
2019-03-18 01:08:29 +00:00
}
]
}
}