VULNERABILITY INTELLIGENCE

CVE-2021-37573

CVSS score6.1 MEDIUM

EPSS probability3.40%

CISA KEVNot currently listed

Published2021-08-09

Last modified2026-06-17

Description

A reflected cross-site scripting (XSS) vulnerability in the web server TTiny Java Web Server and Servlet Container (TJWS) <=1.115 allows an adversary to inject malicious code on the server's "404 Page not Found" error page