CVE-2007-2449

70

FAUCET Score

CVE-2007-2449 describes multiple cross-site scripting (XSS) vulnerabilities present in specific JSP files within the examples web application of Apache Tomcat versions 4.0.0 through 6.0.13. Attackers can inject arbitrary web script or HTML by manipulating the URI after a semicolon character, as demonstrated by a "snp/snoop.jsp;" sequence. This vulnerability has a CVSS score of 4.3 (medium severity), indicating a network-based attack with medium complexity, requiring no authentication, and potentially leading to partial integrity impact. While not listed on the KEV catalog, exploit code is publicly available via ExploitDB and Nuclei templates, though there is no evidence of active exploitation or significant community discussion.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		<= 4.1.36CPE matchmatch criteria	cpe:2.3:a:apache:tomcat::::::::
		4.0.0CPE matchmatch criteria	cpe:2.3:a:apache:tomcat:4.0.0:::::::*
		4.0.1CPE matchmatch criteria	cpe:2.3:a:apache:tomcat:4.0.1:::::::*
		4.0.2CPE matchmatch criteria	cpe:2.3:a:apache:tomcat:4.0.2:::::::*
		4.0.3CPE matchmatch criteria	cpe:2.3:a:apache:tomcat:4.0.3:::::::*

CVSS Data

CVSS version used by this source: 2.0

4.3MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Exploitability Score

8.6

Impact Score

2.9

CvssVersion

2.0

Exploit Intelligence

EPSS Score

77.38%

Probability of exploitation in next 30 days

EPSS Percentile

99.5%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

Nuclei: CVE-2007-2449 · Sep 9, 2024

ExploitDB: EDB-30189 · Jun 14, 2007

This CVE's current EPSS score of 0.7738 is in the 100th percentile among its peer group of 19,958 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (37)

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: tomcat5-0:5.5.23-0jpp.1.0.4.el5

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: jabberd-0:2.0s10-3.38.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: jfreechart-0:0.9.20-3.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: openmotif21-0:2.1.30-11.RHEL4.6

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: perl-Crypt-CBC-0:2.24-1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-apache-0:1.3.27-36.rhn.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-modjk-0:1.2.23-2rhn.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-modperl-0:1.29-16.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-modssl-0:2.8.12-8.rhn.10.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: tomcat5-0:5.0.30-0jpp_10rh

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: jabberd-0:2.0s10-3.37.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: jfreechart-0:0.9.20-3.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: openmotif21-0:2.1.30-9.RHEL3.8

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: perl-Crypt-CBC-0:2.24-1.el3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-apache-0:1.3.27-36.rhn.rhel3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-modjk-0:1.2.23-2rhn.rhel3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-modperl-0:1.29-16.rhel3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-modssl-0:2.8.12-8.rhn.10.rhel3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: tomcat5-0:5.0.30-0jpp_10rh

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: jabberd-0:2.0s10-3.38.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: jfreechart-0:0.9.20-3.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: openmotif21-0:2.1.30-11.RHEL4.6

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: perl-Crypt-CBC-0:2.24-1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-apache-0:1.3.27-36.rhn.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-modjk-0:1.2.23-2rhn.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-modperl-0:1.29-16.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-modssl-0:2.8.12-8.rhn.10.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: tomcat5-0:5.0.30-0jpp_10rh

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.1Fixed in: jfreechart-0:0.9.20-3.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.1Fixed in: mod_perl-0:2.0.2-12.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.1Fixed in: perl-Crypt-CBC-0:2.24-1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.1Fixed in: rhn-web-0:5.1.1-7

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.1Fixed in: tomcat5-0:5.0.30-0jpp_10rh

redhatpatch availablevia redhat_api

Product: RHAPS Version 2 for RHEL 4Fixed in: tomcat5-0:5.5.23-0jpp_4rh.4

Vendor Advisories (2)

mavenGHSA-hc39-rjwp-qffqmedium

Apache Tomcat XSS Vulnerabilities in Examples Web Application

redhatCVE-2007-2449Moderate

tomcat examples jsp XSS

References

community.ca.com / blogs/casecurityresponseblog/archive/2009/01/23.aspx

h20000.www2.hp.com / bizsupport/TechSupport/Document.jsp

lists.apple.com / archives/security-announce/2008//Jun/msg00002.html

lists.opensuse.org / opensuse-security-announce/2008-03/msg00008.html

lists.opensuse.org / opensuse-security-announce/2009-02/msg00002.html

osvdb.org / 36080

rhn.redhat.com / errata/RHSA-2008-0630.html

secunia.com / advisories/26076

secunia.com / advisories/27037

secunia.com / advisories/27727

secunia.com / advisories/29392

secunia.com / advisories/30802

secunia.com / advisories/31493

secunia.com / advisories/33668

securityreason.com / securityalert/2804

exchange.xforce.ibmcloud.com / vulnerabilities/34869

lists.apache.org / thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E

lists.apache.org / thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E

lists.apache.org / thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E

lists.apache.org / thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E

lists.apache.org / thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E

oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10578

support.apple.com / kb/HT2163

support.ca.com / irj/portal/anonymous/phpsupcontent

redhat.com / archives/fedora-package-announce/2007-November/msg00525.html

tomcat.apache.org / security-4.html

tomcat.apache.org / security-5.html

tomcat.apache.org / security-6.html

Patch

mandriva.com / security/advisories

redhat.com / support/errata/RHSA-2007-0569.html

redhat.com / support/errata/RHSA-2008-0261.html

securityfocus.com / archive/1/471351/100/0/threaded

securityfocus.com / archive/1/500396/100/0/threaded

securityfocus.com / archive/1/500412/100/0/threaded

securityfocus.com / bid/24476

securitytracker.com / id

vupen.com / english/advisories/2007/2213

vupen.com / english/advisories/2007/3386

vupen.com / english/advisories/2008/1981/references

vupen.com / english/advisories/2009/0233