Apache Tomcat is an HTTP server application. The
application is exposed to a cross-site scripting
issue because it fails to sanitize user-supplied
input to the "sort" parameter in the "sessionList.jsp"
script.
Ref:
http://www.securityfocus.com/archive/1/514866
10.48.32 - CVE: CVE-2010-4172
Platform: Web Application - Cross Site Scripting