[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2011-0013":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":10,"cwes":11,"cpes":13,"technologies":79,"references":81,"score":134,"epss_score":135,"epss_percentile":136,"is_kev":10,"cisa_kev_date_added":137,"cisa_kev_due_date":137,"cisa_ssvc":138,"attack_mappings":144,"exploits":145},153301,"CVE-2011-0013","EUVD-2022-2220","Improper Neutralization of Input During Web Page Generation in Apache Tomcat\n\nMultiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag.","2022-05-03T03:25:00Z",{},false,[12],"CWE-79",[14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78],"cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.29:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.29:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.20:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.17:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.26:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.27:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.24:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.28:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.28:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.30:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.31:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.18:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.26:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.27:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:6.0.19:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*",[80],"Apache Tomcat",[82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133],"http:\u002F\u002Flists.apple.com\u002Farchives\u002FSecurity-announce\u002F2011\u002F\u002FOct\u002Fmsg00003.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2011-04\u002Fmsg00000.html","http:\u002F\u002Fmarc.info\u002F?l=bugtraq&m=130168502603566&w=2","http:\u002F\u002Fmarc.info\u002F?l=bugtraq&m=132215163318824&w=2","http:\u002F\u002Fmarc.info\u002F?l=bugtraq&m=136485229118404&w=2","http:\u002F\u002Fmarc.info\u002F?l=bugtraq&m=139344343412337&w=2","http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F43192","http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F45022","http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F57126","http:\u002F\u002Fsecurityreason.com\u002Fsecurityalert\u002F8093","http:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT5002","http:\u002F\u002Fsupport.novell.com\u002Fdocs\u002FReadmes\u002FInfoDocument\u002Fpatchbuilder\u002Freadme_5098550.html","http:\u002F\u002Ftomcat.apache.org\u002Fsecurity-5.html#Fixed_in_Apache_Tomcat_5.5.32","http:\u002F\u002Ftomcat.apache.org\u002Fsecurity-6.html#Fixed_in_Apache_Tomcat_6.0.30","http:\u002F\u002Ftomcat.apache.org\u002Fsecurity-7.html#Fixed_in_Apache_Tomcat_7.0.6_%28released_14_Jan_2011%29","http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2011\u002Fdsa-2160","http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2011:030","http:\u002F\u002Fwww.redhat.com\u002Fsupport\u002Ferrata\u002FRHSA-2011-0791.html","http:\u002F\u002Fwww.redhat.com\u002Fsupport\u002Ferrata\u002FRHSA-2011-0896.html","http:\u002F\u002Fwww.redhat.com\u002Fsupport\u002Ferrata\u002FRHSA-2011-0897.html","http:\u002F\u002Fwww.redhat.com\u002Fsupport\u002Ferrata\u002FRHSA-2011-1845.html","http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F516209\u002F30\u002F90\u002Fthreaded","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F46174","http:\u002F\u002Fwww.securitytracker.com\u002Fid?1025026","http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2011\u002F0376","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=675786","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A12878","https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A14945","https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A19269","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2011-0013","https:\u002F\u002Fgithub.com\u002Fapache\u002Ftomcat\u002Fcommit\u002F58223c5ecc0751c3642c810f291b8f033d33b97f","https:\u002F\u002Fgithub.com\u002Fapache\u002Ftomcat55\u002Fcommit\u002F863d77c7d321245de019ac32252828e0a025c5b4","https:\u002F\u002Fweb.archive.org\u002Fweb\u002F20151017023138\u002Fhttp:\u002F\u002Fsecunia.com\u002Fadvisories\u002F57126","https:\u002F\u002Fweb.archive.org\u002Fweb\u002F20120213130147\u002Fhttp:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F46174","https:\u002F\u002Fweb.archive.org\u002Fweb\u002F20120126070320\u002Fhttp:\u002F\u002Fwww.securitytracker.com\u002Fid?1025026","https:\u002F\u002Fweb.archive.org\u002Fweb\u002F20120126065143\u002Fhttp:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F516209\u002F30\u002F90\u002Fthreaded","https:\u002F\u002Fweb.archive.org\u002Fweb\u002F20111229163935\u002Fhttp:\u002F\u002Fsecunia.com\u002Fadvisories\u002F43192","https:\u002F\u002Fweb.archive.org\u002Fweb\u002F20111227000129\u002Fhttp:\u002F\u002Fsecunia.com\u002Fadvisories\u002F45022","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E","https:\u002F\u002Fgithub.com\u002Fapache\u002Ftomcat","https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2011-0013","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2011:1845","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2011:0897","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2011:0896","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2011:0791",0,0.10009,0.95616,null,{"timestamp":137,"automatable":139,"tech_impact":140,"exploitation":141,"cisa_decision":142,"cisa_remediation_timeline":143},"no","partial","none",{},"FSU",[],[146],{"link":105}]