This host is running Apache Tomcat and is prone to Cross Site Scripting vulnerability.

Successful exploitation will allow remote attackers to inject arbitrary HTML codes in the context of the affected web application. Impact Level: Application

Update your cal2.jsp through SVN. Revision numbers are 750924 or 750928. http://tomcat.apache.org/security-6.html http://tomcat.apache.org/security-5.html http://tomcat.apache.org/security-4.html

The issue is due to input validation error in time parameter in 'jsp/cal/cal2.jsp' file in calendar application.

Apache Tomcat version 4.1.0 to 4.1.39, 5.5.0 to 5.5.27 and 6.0.0 to 6.0.18

• http://www.packetstormsecurity.org/0903-exploits/CVE-2009-0781.txt
• http://www.securityfocus.com/archive/1/archive/1/501538/100/0/threaded

---

Updated on 2015-03-25