Weakness Name | Source | |
---|---|---|
Improper Control of Generation of Code ('Code Injection') The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. |
Metrics | Score | Severity | CVSS Vector | Source |
---|---|---|---|---|
V2 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P | [email protected] |
Apache>>Tomcat >> Version To (including) 7.0.39
Apache>>Tomcat >> Version 7.0.0
Apache>>Tomcat >> Version 7.0.0
Apache>>Tomcat >> Version 7.0.1
Apache>>Tomcat >> Version 7.0.2
Apache>>Tomcat >> Version 7.0.2
Apache>>Tomcat >> Version 7.0.3
Apache>>Tomcat >> Version 7.0.4
Apache>>Tomcat >> Version 7.0.4
Apache>>Tomcat >> Version 7.0.10
Apache>>Tomcat >> Version 7.0.11
Apache>>Tomcat >> Version 7.0.12
Apache>>Tomcat >> Version 7.0.13
Apache>>Tomcat >> Version 7.0.14
Apache>>Tomcat >> Version 7.0.15
Apache>>Tomcat >> Version 7.0.16
Apache>>Tomcat >> Version 7.0.17
Apache>>Tomcat >> Version 7.0.18
Apache>>Tomcat >> Version 7.0.19
Apache>>Tomcat >> Version 7.0.20
Apache>>Tomcat >> Version 7.0.21
Apache>>Tomcat >> Version 7.0.22
Apache>>Tomcat >> Version 7.0.23
Apache>>Tomcat >> Version 7.0.24
Apache>>Tomcat >> Version 7.0.25
Apache>>Tomcat >> Version 7.0.26
Apache>>Tomcat >> Version 7.0.27
Apache>>Tomcat >> Version 7.0.28
Apache>>Tomcat >> Version 7.0.29
Apache>>Tomcat >> Version 7.0.30
Apache>>Tomcat >> Version 7.0.31
Apache>>Tomcat >> Version 7.0.32
Apache>>Tomcat >> Version 7.0.33
Apache>>Tomcat >> Version 7.0.34
Apache>>Tomcat >> Version 7.0.35
Apache>>Tomcat >> Version 7.0.36
Apache>>Tomcat >> Version 7.0.37
Apache>>Tomcat >> Version 7.0.38