CVE-2021-37573: Tiny Java Web Server Project Tiny Java Web Server

Medium severity, CVSS 6.1. EPSS: 3.4% chance of exploitation in the next 30 days.

A reflected cross-site scripting (XSS) vulnerability in the web server TTiny Java Web Server and Servlet Container (TJWS) <=1.115 allows an adversary to inject malicious code on the server's "404 Page not Found" error page

Affected products

• Tiny Java Web Server Project Tiny Java Web Server: up to and including 1.115

Published 2021-08-09. Last modified 2026-06-17.