CVE Vulnerability

CVE-2007-3101

Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6 allow remote attackers to inject arbitrary web script via the autoscroll parameter, which is injected into Javascript that is sent to the client.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

References
Link Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=544
http://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12312536&styleName=Text&projectId=12310272
http://www.securityfocus.com/bid/24480 Patch
http://secunia.com/advisories/25618 Vendor Advisory
http://www.vupen.com/english/advisories/2007/2212
http://osvdb.org/36377
https://exchange.xforce.ibmcloud.com/vulnerabilities/34872
Configurations

Configuration 1

cpe:2.3:a:apache:myfaces_tomahawk:*:*:*:*:*:*:*:*
Information

Published : 2007-06-18 10:30

Updated : 2017-07-29 01:31

NVD link : CVE-2007-3101

Mitre link : CVE-2007-3101

Products Affected
No products.
CWE
NVD-CWE-Other