CVE-2007-2450

14

FAUCET Score

CVE-2007-2450 describes multiple cross-site scripting (XSS) vulnerabilities affecting various versions of Apache Tomcat, specifically within its Manager and Host Manager web applications. An authenticated attacker could inject arbitrary web script or HTML, primarily via a parameter name to manager/html/upload. This vulnerability has a CVSS score of 3.5, indicating a medium attack complexity and requiring authentication, with potential impact limited to integrity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		4.0.0CPE matchmatch criteria	cpe:2.3:a:apache:tomcat:4.0.0:::::::*
		4.0.1CPE matchmatch criteria	cpe:2.3:a:apache:tomcat:4.0.1:::::::*
		4.0.2CPE matchmatch criteria	cpe:2.3:a:apache:tomcat:4.0.2:::::::*
		4.0.3CPE matchmatch criteria	cpe:2.3:a:apache:tomcat:4.0.3:::::::*
		4.0.4CPE matchmatch criteria	cpe:2.3:a:apache:tomcat:4.0.4:::::::*

CVSS Data

CVSS version used by this source: 2.0

3.5LOW

AV:N/AC:M/Au:S/C:N/I:P/A:N

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Exploitability Score

6.8

Impact Score

2.9

CvssVersion

2.0

Exploit Intelligence

EPSS Score

3.29%

Probability of exploitation in next 30 days

EPSS Percentile

87.2%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0329 is in the 96th percentile among its peer group of 1,638 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (35)

mavenpatch availablevia ghsa

Product: org.apache.tomcat:tomcatFixed in: 4.1.37

mavenpatch availablevia ghsa

Product: org.apache.tomcat:tomcatFixed in: 5.5.25

mavenpatch availablevia ghsa

Product: org.apache.tomcat:tomcatFixed in: 6.0.14

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: tomcat5-0:5.5.23-0jpp.1.0.4.el5

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: jabberd-0:2.0s10-3.38.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: jfreechart-0:0.9.20-3.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: openmotif21-0:2.1.30-11.RHEL4.6

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: perl-Crypt-CBC-0:2.24-1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-apache-0:1.3.27-36.rhn.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-modjk-0:1.2.23-2rhn.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-modperl-0:1.29-16.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-modssl-0:2.8.12-8.rhn.10.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: tomcat5-0:5.0.30-0jpp_10rh

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: jabberd-0:2.0s10-3.37.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: jfreechart-0:0.9.20-3.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: openmotif21-0:2.1.30-9.RHEL3.8

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: perl-Crypt-CBC-0:2.24-1.el3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-apache-0:1.3.27-36.rhn.rhel3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-modjk-0:1.2.23-2rhn.rhel3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-modperl-0:1.29-16.rhel3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-modssl-0:2.8.12-8.rhn.10.rhel3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: tomcat5-0:5.0.30-0jpp_10rh

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: jabberd-0:2.0s10-3.38.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: jfreechart-0:0.9.20-3.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: openmotif21-0:2.1.30-11.RHEL4.6

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: perl-Crypt-CBC-0:2.24-1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-apache-0:1.3.27-36.rhn.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-modjk-0:1.2.23-2rhn.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-modperl-0:1.29-16.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-modssl-0:2.8.12-8.rhn.10.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: tomcat5-0:5.0.30-0jpp_10rh

redhatpatch availablevia redhat_api

Product: RHAPS Version 2 for RHEL 4Fixed in: tomcat5-0:5.5.23-0jpp_4rh.4

Vendor Advisories (2)

mavenGHSA-5c5p-jxvx-x7j2low

Apache Tomcat vulnerable to Cross-site Scripting

redhatCVE-2007-2450Low

tomcat host manager XSS

References

community.ca.com / blogs/casecurityresponseblog/archive/2009/01/23.aspx

h20000.www2.hp.com / bizsupport/TechSupport/Document.jsp

jvn.jp / jp/JVN%2307100457/index.html

lists.apple.com / archives/security-announce/2008//Jun/msg00002.html

lists.opensuse.org / opensuse-security-announce/2009-02/msg00002.html

secunia.com / advisories/25678

Vendor Advisory

secunia.com / advisories/26076

Vendor Advisory

secunia.com / advisories/27037

Vendor Advisory

secunia.com / advisories/27727

Vendor Advisory

secunia.com / advisories/28549

Vendor Advisory

secunia.com / advisories/30802

Vendor Advisory

secunia.com / advisories/30899

Vendor Advisory

secunia.com / advisories/30908

Vendor Advisory

secunia.com / advisories/33668

Vendor Advisory

securityreason.com / securityalert/2813

exchange.xforce.ibmcloud.com / vulnerabilities/34868

lists.apache.org / thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E

lists.apache.org / thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E

lists.apache.org / thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E

oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11287

sunsolve.sun.com / search/document.do

support.apple.com / kb/HT2163

support.ca.com / irj/portal/anonymous/phpsupcontent

redhat.com / archives/fedora-package-announce/2007-November/msg00525.html

tomcat.apache.org / security-4.html

PatchVendor Advisory

tomcat.apache.org / security-5.html

PatchVendor Advisory

tomcat.apache.org / security-6.html

PatchVendor Advisory

debian.org / security/2008/dsa-1468

mandriva.com / security/advisories

osvdb.org / 36079

redhat.com / support/errata/RHSA-2007-0569.html

redhat.com / support/errata/RHSA-2008-0261.html

securityfocus.com / archive/1/471357/100/0/threaded

securityfocus.com / archive/1/500396/100/0/threaded

securityfocus.com / archive/1/500412/100/0/threaded

securityfocus.com / bid/24475

securitytracker.com / id

vupen.com / english/advisories/2007/2213

vupen.com / english/advisories/2007/3386

vupen.com / english/advisories/2008/1979/references

vupen.com / english/advisories/2008/1981/references

vupen.com / english/advisories/2009/0233