The remote Apache Tomcat Server is vulnerable to cross script scripting and path disclosure issues. Description : The default installation of Tomcat includes various sample jsp pages and servlets. One of these, the 'TroubleShooter' servlet, discloses various information about the system on which Tomcat is installed. This servlet can also be used to perform cross-site scripting attacks against third party users.

Example files should not be left on production servers.

• http://www.osvdb.org/displayvuln.php?osvdb_id=849

---

Updated on 2015-03-25