There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for
    Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML.
    (CVE-2003-0044)

根据其自我报告的版本号，远程主机上监听的 Apache Tomcat 3.x 实例低于 3.3.2，因此会受到多个漏洞影响。

此版本的 Tomcat 随附的“ROOT”和示例应用程序中存在不明的跨站脚本漏洞。

请注意，Nessus 尚未测试此问题，而是只依靠应用程序自我报告的版本号来判断。

自己報告されたバージョン番号によると、リモートホストでリッスンしている Apache Tomcat 3.x のインスタンスは、3.3.2 より前のバージョンです。それ自体は、複数の脆弱性の影響を受けることがあります。

このバージョンの Tomcat に付属している「ROOT」およびサンプルアプリケーションに、未特定のクロスサイトスクリプティング脆弱性があります。

Nessus では、実際にはこれらの欠陥をテストせず、その代わりに Tomcat のバナーのバージョンまたはエラーページに依存するため、これは誤検出の可能性があることに、注意してください。

According to its self-reported version number, the instance of Apache Tomcat 3.x listening on the remote host is prior to 3.3.2, It is, therefore, affected by multiple vulnerabilities.

Unspecified cross-site scripting vulnerabilities exist in the 'ROOT' and example applications shipped with this version of Tomcat.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The developers of tomcat discovered several problems in tomcat version 3.x. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CAN-2003-0042: A maliciously crafted request could     return a directory listing even when an index.html,     index.jsp, or other welcome file is present. File     contents can be returned as well.
  - CAN-2003-0043: A malicious web application could read     the contents of some files outside the web application     via its web.xml file in spite of the presence of a     security manager. The content of files that can be read     as part of an XML document would be accessible.

  - CAN-2003-0044: A cross-site scripting vulnerability was     discovered in the included sample web application that     allows remote attackers to execute arbitrary script     code.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
432028	SCA: security update for org.apache.tomcat:tomcat (GHSA-5hgm-qm5m-5vmw)	Tenable Self-Hosted Container Security	SCA Checks	2025/8/7	2026/7/2	medium
432028	SCA: security update for org.apache.tomcat:tomcat (GHSA-5hgm-qm5m-5vmw)	Tenable Cloud Security	SCA Checks	2025/8/7	2026/7/2	medium
50526	Apache Tomcat 3.x < 3.3.2 多种漏洞	Nessus	Web Servers	2010/11/9	2024/5/6	medium
50526	Apache Tomcat 3.x < 3.3.2 の複数の脆弱性	Nessus	Web Servers	2010/11/9	2024/5/6	medium
50526	Apache Tomcat 3.x < 3.3.2 Multiple Vulnerabilities	Nessus	Web Servers	2010/11/9	2024/5/6	medium
15083	Debian DSA-246-1 : tomcat - information exposure, XSS	Nessus	Debian Local Security Checks	2004/9/29	2021/1/4	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium