Unscored severity · published Feb 7, 2003
CVE-2003-0044
Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert…
–
CVSS
9.1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.1% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TO
Tomcat · Apache
3.0; 3.1; 3.1.1; 3.2; 3.2.1; 3.2.3; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0044
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0044
Vendor Advisory
http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/
Vendor Advisory
http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt
secunia.com
http://secunia.com/advisories/7972
www.ciac.org
http://www.ciac.org/ciac/bulletins/n-060.shtml
Patch
http://www.debian.org/security/2003/dsa-246
www.osvdb.org
http://www.osvdb.org/9203
More from Tomcat
9.8
CVE-2025-24813
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
9.8
CVE-2020-1938
Apache Tomcat Improper Privilege Management Vulnerability
9.8
CVE-2016-8735
Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if…
8.1
CVE-2017-12617
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g
8.1
CVE-2017-12615
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g