GCVE - cpe:2.3:a:caucho_technology:resin:2.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:caucho_technology:resin:2.1.1:*:*:*:*:*:*:*

part: a version: 2.1.1 update: *

Vendor	Caucho Technology (`231f374e-ebae-5c83-ad51-48ed7c6363eb`)
Product	Resin (`67d9dbd7-cd40-5295-a0d3-bff24f7c403c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2003-1513`	vulnerable	2026-06-08 04:47:47.821089	Details available Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) env.jsp, (2) form.jsp, (3) session.jsp, (4) the move parameter to tictactoe.jsp, or the (5) name or (6) comment fields to guestbook.jsp. Published: 2007-10-25T19:00:00.000Z Updated: 2024-08-08T02:28:03.609Z Open on db.gcve.eu Reference links http://secunia.com/advisories/10031 https://exchange.xforce.ibmcloud.com/vulnerabilities/13460 http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012361.html http://www.securityfocus.com/bid/8852	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2090`	vulnerable	2026-06-08 04:47:19.054540	Details available Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-DOS device names such as lpt9.xtp. Published: 2005-08-05T04:00:00.000Z Updated: 2024-09-16T22:35:24.035Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/5252 http://seclists.org/bugtraq/2002/Jul/0186.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1990`	vulnerable	2026-06-08 04:47:18.744812	Details available Resin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL request for the example Java class file HelloServlet. Published: 2005-07-14T04:00:00.000Z Updated: 2024-09-17T00:05:41.137Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/9419.php http://www.securityfocus.com/bid/5095 http://online.securityfocus.com/archive/1/278747	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1989`	vulnerable	2026-06-08 04:47:18.743382	Details available Resin 2.1.1 allows remote attackers to cause a denial of service (thread and connection consumption) via multiple URL requests containing the DOS 'CON' device name and a registered file extension such as .jsp or .xtp. Published: 2005-07-14T04:00:00.000Z Updated: 2024-09-16T20:51:43.858Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0108.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1988`	vulnerable	2026-06-08 04:47:18.743039	Details available Resin 2.1.1 allows remote attackers to cause a denial of service (memory consumption and hang) via a URL with long variables for non-existent resources. Published: 2005-07-14T04:00:00.000Z Updated: 2024-09-16T22:10:31.643Z Open on db.gcve.eu Reference links http://online.securityfocus.com/archive/1/277232 http://www.securityfocus.com/bid/5032 http://www.iss.net/security_center/static/9352.php	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Resin

Notes

PURL mappings

Vulnerability references

Contribute