CVE-2006-7195
apache tomcat: no CVSS score yet. EPSS 5.5% chance of exploitation in the next 30 days. Fixed in org.apache.tomcat:tomcat 5.5.18.
Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.
- EPSS
- 5.5% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:tomcat
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-p57v-p3fx-qgwm | Maven | org.apache.tomcat:tomcat | >=5.0.0 <=5.0.30 | no fix published |
| GHSA-p57v-p3fx-qgwm | Maven | org.apache.tomcat:tomcat | >=5.5.0 <5.5.18 | 5.5.18 |