{"id":"CVE-2009-2696","aliases":["EUVD-2009-2688","GHSA-x75h-2jg7-ffxw","RHSA-2010:0580"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the...","description":"Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\" NOTE: this is due to a missing fix for CVE-2009-0781.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05012,"percentile":0.923,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2010-08-05T18:00:00Z","modified":"2026-08-05T10:01:24Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"tomcat5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"tomcat5-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"tomcat5-common-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"tomcat5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"tomcat5-jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"tomcat5-jasper-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"tomcat5-jsp-2.0-api-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"tomcat5-server-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"tomcat5-servlet-2.4-api-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"tomcat5-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"tomcat5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"tomcat5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"tomcat5-jsp-2.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"tomcat5-servlet-2.4-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"tomcat5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"tomcat5-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"tomcat5-common-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"tomcat5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"tomcat5-jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"tomcat5-jasper-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"tomcat5-jsp-2.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"tomcat5-jsp-2.0-api-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"tomcat5-server-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"tomcat5-servlet-2.4-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"tomcat5-servlet-2.4-api-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"tomcat5-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.23-0jpp.9.el5_5"}]}],"bundled":4}],"products":[{"vendor":"apache","product":"tomcat"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=616717","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report"]},{"url":"http://www.vupen.com/english/advisories/2010/1986","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0580.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://secunia.com/advisories/40813","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2696","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-x75h-2jg7-ffxw"},{"url":"https://access.redhat.com/errata/RHSA-2010:0580","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=559738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=559761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=612799","tags":["report"]},{"url":"http://tomcat.apache.org/security-5.html","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0580.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2693","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2693","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2693","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2696","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2696","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2902","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2902","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2902","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2227","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2227","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2227","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2009-2696","description":"Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\" NOTE: this is due to a missing fix for CVE-2009-0781.","status":"published","published":"2010-08-05T18:00:00Z","modified":"2024-08-07T05:59:57.012Z","updated_at":"2026-11-02T14:33:23.041383Z"}],"euvd":[{"id":"EUVD-2009-2688","description":"Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\" NOTE: this is due to a missing fix for CVE-2009-0781.","status":"published","published":"2010-08-05T18:00:00Z","modified":"2024-08-07T05:59:57Z","updated_at":"2026-11-03T01:39:16.555521Z"}],"ghsa":[{"id":"GHSA-x75h-2jg7-ffxw","title":"Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the...","description":"Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\" NOTE: this is due to a missing fix for CVE-2009-0781.","status":"published","published":"2022-05-02T03:37:48Z","modified":"2023-01-31T05:08:26Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:49:23.788915Z"}],"nvd":[{"id":"CVE-2009-2696","description":"Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\" NOTE: this is due to a missing fix for CVE-2009-0781.","status":"published","published":"2010-08-05T18:17:57.073Z","modified":"2026-06-16T23:10:02.91Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:01:38.684719Z"}],"osv":[{"id":"RHSA-2010:0580","title":"Red Hat Security Advisory: tomcat5 security update","status":"published","published":"2024-09-29T16:27:51Z","modified":"2026-08-05T10:01:24Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}