CVE-2010-4172

Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.

• CWE-79

• http://archives.neohapsis.com/archives/fulldisclosure/2010-11/0285.html
• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
• http://marc.info/?l=bugtraq&m=139344343412337&w=2
• http://secunia.com/advisories/42337Vendor Advisory
• http://secunia.com/advisories/43019
• http://secunia.com/advisories/45022
• http://secunia.com/advisories/57126
• http://securitytracker.com/id?1024764
• http://support.apple.com/kb/HT5002
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html
• http://svn.apache.org/viewvc?view=revision&revision=1037778
• http://svn.apache.org/viewvc?view=revision&revision=1037779
• http://tomcat.apache.org/security-6.html
• http://tomcat.apache.org/security-7.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2011-0791.html
• http://www.redhat.com/support/errata/RHSA-2011-0896.html
• http://www.redhat.com/support/errata/RHSA-2011-0897.html
• http://www.securityfocus.com/archive/1/514866/100/0/threaded
• http://www.securityfocus.com/bid/45015Exploit
• http://www.ubuntu.com/usn/USN-1048-1
• http://www.vupen.com/english/advisories/2010/3047Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0203
• https://bugzilla.redhat.com/show_bug.cgi?id=656246
• https://exchange.xforce.ibmcloud.com/vulnerabilities/63422
• http://archives.neohapsis.com/archives/fulldisclosure/2010-11/0285.html
• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
• http://marc.info/?l=bugtraq&m=139344343412337&w=2
• http://secunia.com/advisories/42337Vendor Advisory
• http://secunia.com/advisories/43019
• http://secunia.com/advisories/45022
• http://secunia.com/advisories/57126
• http://securitytracker.com/id?1024764
• http://support.apple.com/kb/HT5002
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html
• http://svn.apache.org/viewvc?view=revision&revision=1037778
• http://svn.apache.org/viewvc?view=revision&revision=1037779
• http://tomcat.apache.org/security-6.html
• http://tomcat.apache.org/security-7.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2011-0791.html
• http://www.redhat.com/support/errata/RHSA-2011-0896.html
• http://www.redhat.com/support/errata/RHSA-2011-0897.html
• http://www.securityfocus.com/archive/1/514866/100/0/threaded
• http://www.securityfocus.com/bid/45015Exploit
• http://www.ubuntu.com/usn/USN-1048-1
• http://www.vupen.com/english/advisories/2010/3047Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0203
• https://bugzilla.redhat.com/show_bug.cgi?id=656246
• https://exchange.xforce.ibmcloud.com/vulnerabilities/63422

Published

Nov 26, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4166Multiple SQL injection vulnerabilities in Joomla! 1.5.x befo…
• CVE-2010-4167Untrusted search path vulnerability in configure.c in ImageM…
• CVE-2010-4168Multiple use-after-free vulnerabilities in OpenTTD 1.0.x bef…7.5
• CVE-2010-4169Use-after-free vulnerability in mm/mprotect.c in the Linux k…
• CVE-2010-4170The staprun runtime tool in SystemTap 1.3 does not properly …
• CVE-2010-4171The staprun runtime tool in SystemTap 1.3 does not verify th…
• CVE-2010-4173The default configuration of libsdp.conf in libsdp 1.1.104 a…
• CVE-2010-4174Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2010-4175Integer overflow in the rds_cmsg_rdma_args function (net/rds…
• CVE-2010-4176plymouth-pretrigger.sh in dracut and udev, when running on F…
• CVE-2010-4177mysql-gui-tools (mysql-query-browser and mysql-admin) before…5.5
• CVE-2010-4178MySQL-GUI-tools (mysql-administrator) leaks passwords into p…5.5