CVE-2008-1947

MEDIUM · CVSS 4.3 EPSS 9.78%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-06-04 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2008-1947

Severity

MEDIUM

CVSS

4.3

EPSS

9.78%

Apache

Original Filing — NVD Description

Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.