I have a high vulnerability on my PCI scan regarding Tomcat. The error is as follows:
Severity: High
Description: Tomcat includes an example JSP application, cal2.jsp, that is susceptible to a cross site scripting attack. An attacker could exploit this vulnerability to execute arbitrary code in a user's browser.
Remediation: Upgrade to the most recent version of Tomcat or remove the sample applications.
Does anyone know how I can remove the example JSP application safely?
Start Free Trial