CVE-2021-37573

A reflected cross-site scripting (XSS) vulnerability in the web server TTiny Java Web Server and Servlet Container (TJWS) <=1.115 allows an adversary to inject malicious code on the server's "404 Page not Found" error page

• CWE-79

• http://packetstormsecurity.com/files/163825/Tiny-Java-Web-Server-1.115-Cross-Site-Scripting.htmlExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2021/Aug/13Exploit, Mailing List, Third Party Advisory
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-042.txtExploit, Third Party Advisory
• http://packetstormsecurity.com/files/163825/Tiny-Java-Web-Server-1.115-Cross-Site-Scripting.htmlExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2021/Aug/13Exploit, Mailing List, Third Party Advisory
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-042.txtExploit, Third Party Advisory

Published

Aug 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37568MediaTek microchips, as used in NETGEAR devices through 2021…8.8
• CVE-2021-37569MediaTek microchips, as used in NETGEAR devices through 2021…8.8
• CVE-2021-3757immer is vulnerable to Improperly Controlled Modification of…9.8
• CVE-2021-37570MediaTek microchips, as used in NETGEAR devices through 2021…7.5
• CVE-2021-37571MediaTek microchips, as used in NETGEAR devices through 2021…8.8
• CVE-2021-37572MediaTek microchips, as used in NETGEAR devices through 2021…7.5
• CVE-2021-37576arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5…7.8
• CVE-2021-37577Bluetooth LE and BR/EDR Secure Connections pairing and Secur…6.8
• CVE-2021-37578Apache jUDDI uses several classes related to Java's Remote M…9.8
• CVE-2021-37579The Dubbo Provider will check the incoming request and the c…9.8
• CVE-2021-3758bookstack is vulnerable to Server-Side Request Forgery (SSRF…6.5
• CVE-2021-37580A flaw was found in Apache ShenYu Admin. The incorrect use o…9.8