Dashboard / CVE-2019-0221

CVE-2019-0221

MEDIUM
HIGH Priority: 3.55 BB Relevance: 72/100
Published: 2019-05-28 Modified: 2026-11-02 First seen: 2026-11-02 Status: active

Attack Surface

Network Low Complexity No Auth Scope Change

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: Required
S: Changed
C: Low
I: Low
A: None

Description

The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be present in a production website.

Weakness Classification (1)

Affected Software (31)

VendorProductVersion
Apache Apache Tomcat Apache Tomcat 9.0.0.M1 to 9.0.0.17
Apache Apache Tomcat 8.5.0 to 8.5.39
Apache Apache Tomcat 7.0.0 to 7.0.93
apache tomcat 7.0.0 – 7.0.93
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
apache tomcat 9.0.0
Showing 30 of 31 entries

References & Advisories (29)

https://usn.ubuntu.com/4128-1/
vendor-advisory x_refsource_UBUNTU
https://usn.ubuntu.com/4128-2/
vendor-advisory x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:3929
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3931
vendor-advisory x_refsource_REDHAT
https://security.gentoo.org/glsa/202003-43
vendor-advisory x_refsource_GENTOO
https://www.debian.org/security/2019/dsa-4596
vendor-advisory x_refsource_DEBIAN
http://www.securityfocus.com/bid/108545
vdb-entry x_refsource_BID
Showing 25 of 29 references

Bug Bounty Relevance

72 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ High exploitation probability

CVSS Score

6.1 / 10.0 v3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS — Exploitation Probability

58.25%
Raw Score 0.582530
Percentile 99.1%
Date 2026-11-13

EPSS Trend

2026-11-13
0.58253
2026-11-12
0.58253
2026-11-10
0.58253
2026-11-09
0.58253
2026-11-08
0.58253
2026-11-07
0.59194
2026-11-06
0.59194
2026-11-05
0.59194
2026-11-04
0.59194
2026-11-03
0.59194
2026-11-02
0.59194

Intelligence Sources

mitre ref →
nvd ref →

External Links