CVE-2026-50229 Scanner
CVE-2026-50229 Scanner - Cross-Site Scripting (XSS) vulnerability in Apache Tomcat
Used 2.3k times · 4.2k assets checked · url
CVE
CVE-2026-50229
6.1
CVSSmedium
Exploitable remotely over the internet · no authentication required · user interaction needed.
Description
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fix the issue.
Attack Vector
Network
Privileges Req.
None
User Interaction
Required
apache tomcat
Updated Nov 6, 2026View on NVD →
S4E scanner
CVE history: apache tomcat
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →