CVE-2001-0829: Apache Tomcat

Medium severity, CVSS 5.1. EPSS: 12.2% chance of exploitation in the next 30 days.

A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript to be inserted into an error message.

Affected products

• Apache Tomcat: version 3.2.1 only

Published 2001-12-06. Last modified 2026-06-16.