{"id":"CVE-2003-0044","aliases":[],"url":"https://o3.security/vulnerability/CVE-2003-0044","summary":"Jakarta Tomcat cross-site scripting (XSS) vulnerability","details":"Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML.","published":"2022-04-29T01:25:44Z","modified":"2023-11-08T03:56:45.101873Z","cvss":null,"epss":{"score":0.09133,"percentile":0.94916,"asOf":"2026-08-22"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Maven","name":"org.apache.tomcat:tomcat","fixedVersion":"3.3.2"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0044"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11196"},{"type":"WEB","url":"http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a"},{"type":"WEB","url":"http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt"},{"type":"WEB","url":"http://secunia.com/advisories/7972"},{"type":"WEB","url":"http://www.ciac.org/ciac/bulletins/n-060.shtml"},{"type":"WEB","url":"http://www.debian.org/security/2003/dsa-246"},{"type":"WEB","url":"http://www.osvdb.org/9203"},{"type":"WEB","url":"http://www.osvdb.org/9204"},{"type":"WEB","url":"http://www.securityfocus.com/advisories/5111"},{"type":"WEB","url":"http://www.securityfocus.com/bid/6720"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2023-11-08T03:56:45.101873Z"}}