[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSYyMXruinnvQSsoywxgt2iFpath8f3kzg1XmrKW8Tjg":3,"g5a-risk:CVE-2006-0254":163},{"success":4,"data":5,"meta":161},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":28,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":42,"references":43,"referencesCount":113,"weaknesses":114,"weaknessesCount":42,"isActivelyExploited":31,"cisaInfo":28,"otxData":28,"relatedBlogPosts":118,"seoMetadata":119,"configurations":144,"relatedVendorCves":152,"notableEvents":153},"CVE-2006-0254","What is CVE-2006-0254?","Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer.","Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time par...","2006-01-18T01:51:00","2026-06-16T22:20:11.737",4.3,"AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":32},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":24,"ExploitabilityScore":29,"ImpactScore":30,"ACInsufInfo":31,"ObtainAllPrivilege":31,"ObtainUserPrivilege":31,"ObtainOtherPrivilege":31,"UserInteractionRequired":31},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":25,"IntegrityImpact":26,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","MEDIUM","NONE","PARTIAL","",null,8.6,2.9,false,[],0.32247,[33,33,33,33,33,33,33],"Medium",[37],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"apache","geronimo","1.0","cpe:2.3:a:apache:geronimo:1.0:*:*:*:*:*:*:*",1,[44,50,54,58,61,65,68,72,75,79,83,86,89,91,93,95,97,99,101,103,105,107,109,111],{"url":45,"source":46,"tags":47},"http:\u002F\u002Fissues.apache.org\u002Fjira\u002Fbrowse\u002FGERONIMO-1474","Apache",[48,49],"Exploit","Vendor Advisory",{"url":51,"source":52,"tags":53},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2008-0630.html","Red Hat",[],{"url":55,"source":56,"tags":57},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F18485","Secunia",[49],{"url":59,"source":56,"tags":60},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F31493",[],{"url":62,"source":63,"tags":64},"http:\u002F\u002Fwww.oliverkarow.de\u002Fresearch\u002Fgeronimo_css.txt","Oliverkarow",[48,49],{"url":66,"source":52,"tags":67},"http:\u002F\u002Fwww.redhat.com\u002Fsupport\u002Ferrata\u002FRHSA-2008-0261.html",[],{"url":69,"source":70,"tags":71},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F421996\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":73,"source":70,"tags":74},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F16260",[48],{"url":76,"source":77,"tags":78},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2006\u002F0217","Vupen",[],{"url":80,"source":81,"tags":82},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F24158","Ibmcloud",[],{"url":84,"source":81,"tags":85},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F24159",[],{"url":87,"source":46,"tags":88},"https:\u002F\u002Fissues.apache.org\u002Fjira\u002Fsecure\u002FReleaseNote.jspa?version=12310181&styleName=Html&projectId=10220&Create=Create",[],{"url":45,"source":46,"tags":90},[48,49],{"url":51,"source":52,"tags":92},[],{"url":55,"source":56,"tags":94},[49],{"url":59,"source":56,"tags":96},[],{"url":62,"source":63,"tags":98},[48,49],{"url":66,"source":52,"tags":100},[],{"url":69,"source":70,"tags":102},[],{"url":73,"source":70,"tags":104},[48],{"url":76,"source":77,"tags":106},[],{"url":80,"source":81,"tags":108},[],{"url":84,"source":81,"tags":110},[],{"url":87,"source":46,"tags":112},[],24,[115],{"id":116,"name":116,"description":117},"Unknown","NVD-CWE-Other",[],{"title":120,"metaDescription":121,"keywords":122,"canonicalUrl":123,"structuredData":124},"What is CVE-2006-0254? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2006-0254, a medium severity cyber security vulnerability from 2006. High exploit probability (32.2%). Multiple cross-site scri...","CVE-2006-0254, CVE-2006-0254 vulnerability, CVE-2006-0254 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2006, CVSS score, exploit, patch, remediation, apache security, geronimo vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2006-0254",{"@context":125,"@type":126,"headline":120,"description":121,"datePublished":10,"dateModified":11,"author":127,"publisher":131,"about":135,"mainEntityOfPage":139,"articleSection":142,"keywords":143},"https:\u002F\u002Fschema.org","TechArticle",{"@type":128,"name":129,"url":130},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":128,"name":129,"url":130,"logo":132},{"@type":133,"url":134},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":136,"name":6,"description":137,"additionalType":138},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":140,"@id":141},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2006-0254","Cybersecurity","CVE-2006-0254, CVE-2006-0254 vulnerability, CVE-2006-0254 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[145],{"Operator":28,"Negate":28,"Nodes":146},[147],{"Operator":148,"Negate":31,"CPEMatch":149},"OR",[150],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":151,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"CCEA65AC-5A1B-4354-AB6C-E1525B060581",[],[154],{"id":155,"eventType":156,"eventTime":157,"details":158,"label":159,"color":160},"989064c3-d4d4-43b5-ae20-39e8cc03143b","LOW_EPSS_DELTA","2026-06-16T04:07:15.357252+00:00","Daily EPSS score decreased by 0.137 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":162,"version":22},1792285118078,{"score":164,"band":165,"action":166,"scoredAt":167},37,"Low","Monitor","2026-10-17T06:33:52.956759+00:00"]