# CVE-2003-0044

## Summary

- **CVE ID:** CVE-2003-0044
- **Severity:** UNKNOWN
- **CVSS Score:** 1.09
- **CWE:** N/A
- **Published:** Jan 29, 2003
- **Last Modified:** Mar 16, 2026

## Description

Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML.

## Affected Products

- n/a — n/a (n/a)

## References

- [CNA](http://www.debian.org/security/2003/dsa-246)
- [CNA](http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/)
- [CNA](http://www.securityfocus.com/bid/6720)
- [CNA](http://www.securityfocus.com/advisories/5111)
- [CNA](https://exchange.xforce.ibmcloud.com/vulnerabilities/11196)
- [CNA](http://www.ciac.org/ciac/bulletins/n-060.shtml)
- [CNA](http://www.osvdb.org/9204)
- [CNA](http://secunia.com/advisories/7972)
- [CNA](http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt)
- [CNA](http://www.osvdb.org/9203)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 27.28%
- **EPSS Percentile:** 96.3

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._