Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-2kku-pzer-9ufv
Summary
Session Fixation vulnerability in Apache Tomcat via rewrite valve.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105.
Older, EOL versions may also be affected.

Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.
Aliases
0
alias CVE-2025-55668
1
alias GHSA-23hv-mwm6-g8jf
Fixed_packages
0
url pkg:apache/tomcat@9.0.106
purl pkg:apache/tomcat@9.0.106
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9kfe-1esf-uydm
1
vulnerability VCID-fpgj-82wf-ykbw
2
vulnerability VCID-k59r-wjt3-wqe5
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.106
1
url pkg:apache/tomcat@10.1.42
purl pkg:apache/tomcat@10.1.42
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fpgj-82wf-ykbw
1
vulnerability VCID-k59r-wjt3-wqe5
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@10.1.42
2
url pkg:apache/tomcat@11.0.8
purl pkg:apache/tomcat@11.0.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fpgj-82wf-ykbw
1
vulnerability VCID-k59r-wjt3-wqe5
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@11.0.8
3
url pkg:deb/debian/tomcat10@10.1.34-0%2Bdeb12u2?distro=trixie
purl pkg:deb/debian/tomcat10@10.1.34-0%2Bdeb12u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2rmy-13ym-3bgm
1
vulnerability VCID-35xg-a746-5qgc
2
vulnerability VCID-74tx-sx8a-guhs
3
vulnerability VCID-8e1c-rbkg-v7c2
4
vulnerability VCID-d1fm-vbd1-n7au
5
vulnerability VCID-gyed-x6s8-ybhr
6
vulnerability VCID-rsxs-u5cc-rkgj
7
vulnerability VCID-yrzk-1dbk-muhy
8
vulnerability VCID-zw2q-kna8-mqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat10@10.1.34-0%252Bdeb12u2%3Fdistro=trixie
4
url pkg:deb/debian/tomcat10@10.1.46-1?distro=trixie
purl pkg:deb/debian/tomcat10@10.1.46-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat10@10.1.46-1%3Fdistro=trixie
5
url pkg:deb/debian/tomcat10@10.1.52-1~deb12u1?distro=trixie
purl pkg:deb/debian/tomcat10@10.1.52-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat10@10.1.52-1~deb12u1%3Fdistro=trixie
6
url pkg:deb/debian/tomcat10@10.1.52-1~deb13u1?distro=trixie
purl pkg:deb/debian/tomcat10@10.1.52-1~deb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2rmy-13ym-3bgm
1
vulnerability VCID-35xg-a746-5qgc
2
vulnerability VCID-74tx-sx8a-guhs
3
vulnerability VCID-8e1c-rbkg-v7c2
4
vulnerability VCID-d1fm-vbd1-n7au
5
vulnerability VCID-gyed-x6s8-ybhr
6
vulnerability VCID-rsxs-u5cc-rkgj
7
vulnerability VCID-yrzk-1dbk-muhy
8
vulnerability VCID-zw2q-kna8-mqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat10@10.1.52-1~deb13u1%3Fdistro=trixie
7
url pkg:deb/debian/tomcat10@10.1.52-1?distro=trixie
purl pkg:deb/debian/tomcat10@10.1.52-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2rmy-13ym-3bgm
1
vulnerability VCID-35xg-a746-5qgc
2
vulnerability VCID-74tx-sx8a-guhs
3
vulnerability VCID-8e1c-rbkg-v7c2
4
vulnerability VCID-d1fm-vbd1-n7au
5
vulnerability VCID-gyed-x6s8-ybhr
6
vulnerability VCID-rsxs-u5cc-rkgj
7
vulnerability VCID-yrzk-1dbk-muhy
8
vulnerability VCID-zw2q-kna8-mqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat10@10.1.52-1%3Fdistro=trixie
8
url pkg:deb/debian/tomcat10@10.1.52-2?distro=trixie
purl pkg:deb/debian/tomcat10@10.1.52-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat10@10.1.52-2%3Fdistro=trixie
9
url pkg:deb/debian/tomcat10@10.1.54-1?distro=trixie
purl pkg:deb/debian/tomcat10@10.1.54-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat10@10.1.54-1%3Fdistro=trixie
10
url pkg:deb/debian/tomcat11@11.0.11-1?distro=trixie
purl pkg:deb/debian/tomcat11@11.0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat11@11.0.11-1%3Fdistro=trixie
11
url pkg:deb/debian/tomcat11@11.0.15-1~deb13u1?distro=trixie
purl pkg:deb/debian/tomcat11@11.0.15-1~deb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2rmy-13ym-3bgm
1
vulnerability VCID-35xg-a746-5qgc
2
vulnerability VCID-74tx-sx8a-guhs
3
vulnerability VCID-8e1c-rbkg-v7c2
4
vulnerability VCID-8war-4v58-eub2
5
vulnerability VCID-d1fm-vbd1-n7au
6
vulnerability VCID-gyed-x6s8-ybhr
7
vulnerability VCID-rsxs-u5cc-rkgj
8
vulnerability VCID-yrzk-1dbk-muhy
9
vulnerability VCID-zw2q-kna8-mqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat11@11.0.15-1~deb13u1%3Fdistro=trixie
12
url pkg:deb/debian/tomcat11@11.0.18-1?distro=trixie
purl pkg:deb/debian/tomcat11@11.0.18-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2rmy-13ym-3bgm
1
vulnerability VCID-35xg-a746-5qgc
2
vulnerability VCID-74tx-sx8a-guhs
3
vulnerability VCID-8e1c-rbkg-v7c2
4
vulnerability VCID-d1fm-vbd1-n7au
5
vulnerability VCID-gyed-x6s8-ybhr
6
vulnerability VCID-rsxs-u5cc-rkgj
7
vulnerability VCID-yrzk-1dbk-muhy
8
vulnerability VCID-zw2q-kna8-mqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat11@11.0.18-1%3Fdistro=trixie
13
url pkg:deb/debian/tomcat11@11.0.21-1?distro=trixie
purl pkg:deb/debian/tomcat11@11.0.21-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat11@11.0.21-1%3Fdistro=trixie
14
url pkg:deb/debian/tomcat9@9.0.43-2~deb11u10?distro=trixie
purl pkg:deb/debian/tomcat9@9.0.43-2~deb11u10?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.43-2~deb11u10%3Fdistro=trixie
15
url pkg:deb/debian/tomcat9@9.0.70-2
purl pkg:deb/debian/tomcat9@9.0.70-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-246u-a4rh-yyd4
1
vulnerability VCID-2x6a-3gh1-rkhs
2
vulnerability VCID-2zq1-na8s-mfdd
3
vulnerability VCID-4cag-c4pb-dfaz
4
vulnerability VCID-8myk-ac5b-huh8
5
vulnerability VCID-9kfe-1esf-uydm
6
vulnerability VCID-cfhw-vmcp-y3bc
7
vulnerability VCID-fpgj-82wf-ykbw
8
vulnerability VCID-gb2v-96xj-ybad
9
vulnerability VCID-gvhy-d4gm-57d3
10
vulnerability VCID-k59r-wjt3-wqe5
11
vulnerability VCID-kukv-k3z7-7fgs
12
vulnerability VCID-sr8e-w1qk-r7fz
13
vulnerability VCID-xqjr-7xfw-mbh2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.70-2
16
url pkg:deb/debian/tomcat9@9.0.70-2?distro=trixie
purl pkg:deb/debian/tomcat9@9.0.70-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.70-2%3Fdistro=trixie
17
url pkg:deb/debian/tomcat9@9.0.95-1?distro=trixie
purl pkg:deb/debian/tomcat9@9.0.95-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.95-1%3Fdistro=trixie
18
url pkg:deb/debian/tomcat9@9.0.115-1?distro=trixie
purl pkg:deb/debian/tomcat9@9.0.115-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.115-1%3Fdistro=trixie
19
url pkg:maven/org.apache.tomcat/tomcat@9.0.106
purl pkg:maven/org.apache.tomcat/tomcat@9.0.106
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8war-4v58-eub2
1
vulnerability VCID-9kfe-1esf-uydm
2
vulnerability VCID-fpgj-82wf-ykbw
3
vulnerability VCID-k59r-wjt3-wqe5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.106
20
url pkg:maven/org.apache.tomcat/tomcat@10.1.42
purl pkg:maven/org.apache.tomcat/tomcat@10.1.42
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8war-4v58-eub2
1
vulnerability VCID-fpgj-82wf-ykbw
2
vulnerability VCID-k59r-wjt3-wqe5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.42
21
url pkg:maven/org.apache.tomcat/tomcat@11.0.8
purl pkg:maven/org.apache.tomcat/tomcat@11.0.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8war-4v58-eub2
1
vulnerability VCID-fpgj-82wf-ykbw
2
vulnerability VCID-k59r-wjt3-wqe5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.8
22
url pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.106
purl pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.106
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.106
23
url pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.42
purl pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.42
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.42
24
url pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.8
purl pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.8
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.8
Affected_packages
0
url pkg:apache/tomcat@9.0.0%2BM1
purl pkg:apache/tomcat@9.0.0%2BM1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18q4-zark-s7a7
1
vulnerability VCID-1e6p-cppr-2bh2
2
vulnerability VCID-1hdb-24e3-f3d6
3
vulnerability VCID-1k8f-vsg1-k3d6
4
vulnerability VCID-246u-a4rh-yyd4
5
vulnerability VCID-2kku-pzer-9ufv
6
vulnerability VCID-2sbh-sy57-3uez
7
vulnerability VCID-2x6a-3gh1-rkhs
8
vulnerability VCID-39e3-jfbg-s3hk
9
vulnerability VCID-3cr9-g81m-4ugy
10
vulnerability VCID-3n4t-bvb1-5qer
11
vulnerability VCID-3r3s-q21j-c3au
12
vulnerability VCID-43j2-w5xt-43g9
13
vulnerability VCID-46bv-6b7y-3bca
14
vulnerability VCID-4aaa-errb-2qdw
15
vulnerability VCID-4cag-c4pb-dfaz
16
vulnerability VCID-4tf3-7f5b-2ffu
17
vulnerability VCID-5sgv-7nsz-5fa8
18
vulnerability VCID-66kh-s6cr-tqf9
19
vulnerability VCID-68fk-4g86-ekbp
20
vulnerability VCID-885s-t4dx-dybv
21
vulnerability VCID-95d1-arxd-hkd1
22
vulnerability VCID-9exq-fhv6-bbea
23
vulnerability VCID-9kfe-1esf-uydm
24
vulnerability VCID-a8gk-n8bq-87cp
25
vulnerability VCID-aeeu-fpay-wufz
26
vulnerability VCID-arkn-bca7-hqam
27
vulnerability VCID-ayrd-8ntf-hkh3
28
vulnerability VCID-dzpn-w4b3-vbcm
29
vulnerability VCID-eb37-mkxf-7fgw
30
vulnerability VCID-enaj-f97c-jbh7
31
vulnerability VCID-f77q-v5xp-e7dy
32
vulnerability VCID-fpgj-82wf-ykbw
33
vulnerability VCID-fyfz-6tr5-2fc7
34
vulnerability VCID-g7bk-891a-uufy
35
vulnerability VCID-gb2v-96xj-ybad
36
vulnerability VCID-gvhy-d4gm-57d3
37
vulnerability VCID-gyed-x6s8-ybhr
38
vulnerability VCID-hmbm-5ysw-77bu
39
vulnerability VCID-hves-r5bg-yfes
40
vulnerability VCID-k59r-wjt3-wqe5
41
vulnerability VCID-kagr-74d9-kyhx
42
vulnerability VCID-kukv-k3z7-7fgs
43
vulnerability VCID-kwab-3s4q-eka4
44
vulnerability VCID-kyb8-rvyw-s7b1
45
vulnerability VCID-m1zd-uytj-3bej
46
vulnerability VCID-m2zn-ja8d-7kg8
47
vulnerability VCID-maw6-4qs5-ykae
48
vulnerability VCID-n3ab-nk7c-hqc9
49
vulnerability VCID-n3zn-tuck-gkfe
50
vulnerability VCID-nvbx-q971-skgm
51
vulnerability VCID-pqxe-tfhk-47b7
52
vulnerability VCID-ruuh-g3fa-m7d8
53
vulnerability VCID-sr8e-w1qk-r7fz
54
vulnerability VCID-t2ne-75ck-eqcr
55
vulnerability VCID-tfrs-d458-tfaq
56
vulnerability VCID-u3ck-cvgt-fuhd
57
vulnerability VCID-v8ku-sjc8-wfga
58
vulnerability VCID-vdnj-sqmx-e3ep
59
vulnerability VCID-vhjj-dnft-kkf4
60
vulnerability VCID-wbaq-j85q-y3c6
61
vulnerability VCID-wgsc-dnn1-ukeq
62
vulnerability VCID-xf8r-kqxb-7qdy
63
vulnerability VCID-y9ne-rw7e-vugf
64
vulnerability VCID-yfx4-4gsc-2kgh
65
vulnerability VCID-yxpq-rrry-j3h8
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.0%252BM1
1
url pkg:apache/tomcat@9.0.105
purl pkg:apache/tomcat@9.0.105
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-246u-a4rh-yyd4
1
vulnerability VCID-2kku-pzer-9ufv
2
vulnerability VCID-2x6a-3gh1-rkhs
3
vulnerability VCID-bks8-nvm9-vbgy
4
vulnerability VCID-gb2v-96xj-ybad
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.105
2
url pkg:apache/tomcat@10.1.0-M1
purl pkg:apache/tomcat@10.1.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1e6p-cppr-2bh2
1
vulnerability VCID-246u-a4rh-yyd4
2
vulnerability VCID-2kku-pzer-9ufv
3
vulnerability VCID-2rmy-13ym-3bgm
4
vulnerability VCID-2x6a-3gh1-rkhs
5
vulnerability VCID-3vdn-j7sj-dfdn
6
vulnerability VCID-43j2-w5xt-43g9
7
vulnerability VCID-4cag-c4pb-dfaz
8
vulnerability VCID-56jv-htmt-rkew
9
vulnerability VCID-5781-s1ny-q7ey
10
vulnerability VCID-5sgv-7nsz-5fa8
11
vulnerability VCID-6pm1-byhk-eqfg
12
vulnerability VCID-8mns-kw6c-a7dk
13
vulnerability VCID-8myk-ac5b-huh8
14
vulnerability VCID-b3bb-9ajg-sfc9
15
vulnerability VCID-cfhw-vmcp-y3bc
16
vulnerability VCID-d1fm-vbd1-n7au
17
vulnerability VCID-fpgj-82wf-ykbw
18
vulnerability VCID-gb2v-96xj-ybad
19
vulnerability VCID-gvhy-d4gm-57d3
20
vulnerability VCID-gyed-x6s8-ybhr
21
vulnerability VCID-j6cj-ftyd-3ffa
22
vulnerability VCID-j8tk-s915-pbfy
23
vulnerability VCID-k59r-wjt3-wqe5
24
vulnerability VCID-kukv-k3z7-7fgs
25
vulnerability VCID-maw6-4qs5-ykae
26
vulnerability VCID-n9yk-e49f-n7e7
27
vulnerability VCID-nmq2-8ysj-4fbc
28
vulnerability VCID-p6pa-f1fg-hbhg
29
vulnerability VCID-p8q2-pt96-5ye8
30
vulnerability VCID-qkx6-32cj-jfbp
31
vulnerability VCID-rzj2-4kcj-43dq
32
vulnerability VCID-sr8e-w1qk-r7fz
33
vulnerability VCID-stds-vw5z-auhp
34
vulnerability VCID-v7tp-1t4h-zqeg
35
vulnerability VCID-v8ku-sjc8-wfga
36
vulnerability VCID-vsdf-4tfj-uybe
37
vulnerability VCID-wptr-hkjx-s7c3
38
vulnerability VCID-xqjr-7xfw-mbh2
39
vulnerability VCID-y9ne-rw7e-vugf
40
vulnerability VCID-zw2q-kna8-mqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@10.1.0-M1
3
url pkg:apache/tomcat@10.1.41
purl pkg:apache/tomcat@10.1.41
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-246u-a4rh-yyd4
1
vulnerability VCID-2kku-pzer-9ufv
2
vulnerability VCID-2x6a-3gh1-rkhs
3
vulnerability VCID-bks8-nvm9-vbgy
4
vulnerability VCID-gb2v-96xj-ybad
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@10.1.41
4
url pkg:apache/tomcat@11.0.0-M1
purl pkg:apache/tomcat@11.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1e6p-cppr-2bh2
1
vulnerability VCID-246u-a4rh-yyd4
2
vulnerability VCID-2kku-pzer-9ufv
3
vulnerability VCID-2rmy-13ym-3bgm
4
vulnerability VCID-2x6a-3gh1-rkhs
5
vulnerability VCID-3vdn-j7sj-dfdn
6
vulnerability VCID-43j2-w5xt-43g9
7
vulnerability VCID-4cag-c4pb-dfaz
8
vulnerability VCID-5781-s1ny-q7ey
9
vulnerability VCID-5sgv-7nsz-5fa8
10
vulnerability VCID-74tx-sx8a-guhs
11
vulnerability VCID-8mns-kw6c-a7dk
12
vulnerability VCID-8myk-ac5b-huh8
13
vulnerability VCID-8war-4v58-eub2
14
vulnerability VCID-b3bb-9ajg-sfc9
15
vulnerability VCID-bks8-nvm9-vbgy
16
vulnerability VCID-cfhw-vmcp-y3bc
17
vulnerability VCID-d1fm-vbd1-n7au
18
vulnerability VCID-fpgj-82wf-ykbw
19
vulnerability VCID-gb2v-96xj-ybad
20
vulnerability VCID-gvhy-d4gm-57d3
21
vulnerability VCID-gyed-x6s8-ybhr
22
vulnerability VCID-j6cj-ftyd-3ffa
23
vulnerability VCID-k59r-wjt3-wqe5
24
vulnerability VCID-kukv-k3z7-7fgs
25
vulnerability VCID-maw6-4qs5-ykae
26
vulnerability VCID-n9yk-e49f-n7e7
27
vulnerability VCID-p6pa-f1fg-hbhg
28
vulnerability VCID-rzj2-4kcj-43dq
29
vulnerability VCID-sr8e-w1qk-r7fz
30
vulnerability VCID-v7tp-1t4h-zqeg
31
vulnerability VCID-v8ku-sjc8-wfga
32
vulnerability VCID-vsdf-4tfj-uybe
33
vulnerability VCID-xqjr-7xfw-mbh2
34
vulnerability VCID-y9ne-rw7e-vugf
35
vulnerability VCID-yrzk-1dbk-muhy
36
vulnerability VCID-zw2q-kna8-mqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@11.0.0-M1
5
url pkg:apache/tomcat@11.0.7
purl pkg:apache/tomcat@11.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-246u-a4rh-yyd4
1
vulnerability VCID-2kku-pzer-9ufv
2
vulnerability VCID-2x6a-3gh1-rkhs
3
vulnerability VCID-bks8-nvm9-vbgy
4
vulnerability VCID-gb2v-96xj-ybad
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@11.0.7
6
url pkg:deb/debian/tomcat9@9.0.31-1~deb10u6
purl pkg:deb/debian/tomcat9@9.0.31-1~deb10u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1e6p-cppr-2bh2
1
vulnerability VCID-246u-a4rh-yyd4
2
vulnerability VCID-2kku-pzer-9ufv
3
vulnerability VCID-2rmy-13ym-3bgm
4
vulnerability VCID-2x6a-3gh1-rkhs
5
vulnerability VCID-2zq1-na8s-mfdd
6
vulnerability VCID-35xg-a746-5qgc
7
vulnerability VCID-3vdn-j7sj-dfdn
8
vulnerability VCID-43j2-w5xt-43g9
9
vulnerability VCID-46bv-6b7y-3bca
10
vulnerability VCID-4cag-c4pb-dfaz
11
vulnerability VCID-56jv-htmt-rkew
12
vulnerability VCID-5781-s1ny-q7ey
13
vulnerability VCID-5sgv-7nsz-5fa8
14
vulnerability VCID-66kh-s6cr-tqf9
15
vulnerability VCID-6pm1-byhk-eqfg
16
vulnerability VCID-74tx-sx8a-guhs
17
vulnerability VCID-885s-t4dx-dybv
18
vulnerability VCID-8e1c-rbkg-v7c2
19
vulnerability VCID-8mns-kw6c-a7dk
20
vulnerability VCID-8myk-ac5b-huh8
21
vulnerability VCID-8war-4v58-eub2
22
vulnerability VCID-9kfe-1esf-uydm
23
vulnerability VCID-a8gk-n8bq-87cp
24
vulnerability VCID-b3bb-9ajg-sfc9
25
vulnerability VCID-cfhw-vmcp-y3bc
26
vulnerability VCID-d1fm-vbd1-n7au
27
vulnerability VCID-dy6m-zt6r-9ubd
28
vulnerability VCID-dzan-r49k-kqab
29
vulnerability VCID-dzpn-w4b3-vbcm
30
vulnerability VCID-eb37-mkxf-7fgw
31
vulnerability VCID-fpgj-82wf-ykbw
32
vulnerability VCID-gb2v-96xj-ybad
33
vulnerability VCID-gvhy-d4gm-57d3
34
vulnerability VCID-gyed-x6s8-ybhr
35
vulnerability VCID-j6cj-ftyd-3ffa
36
vulnerability VCID-j8tk-s915-pbfy
37
vulnerability VCID-k59r-wjt3-wqe5
38
vulnerability VCID-k9cg-ehdw-dbh6
39
vulnerability VCID-kukv-k3z7-7fgs
40
vulnerability VCID-kwab-3s4q-eka4
41
vulnerability VCID-maw6-4qs5-ykae
42
vulnerability VCID-n3ab-nk7c-hqc9
43
vulnerability VCID-n9yk-e49f-n7e7
44
vulnerability VCID-nmq2-8ysj-4fbc
45
vulnerability VCID-nvbx-q971-skgm
46
vulnerability VCID-p6pa-f1fg-hbhg
47
vulnerability VCID-p8q2-pt96-5ye8
48
vulnerability VCID-qkx6-32cj-jfbp
49
vulnerability VCID-ran8-rnqn-tkbc
50
vulnerability VCID-rq42-qvsy-hue6
51
vulnerability VCID-rsxs-u5cc-rkgj
52
vulnerability VCID-ruuh-g3fa-m7d8
53
vulnerability VCID-rzj2-4kcj-43dq
54
vulnerability VCID-sr8e-w1qk-r7fz
55
vulnerability VCID-stds-vw5z-auhp
56
vulnerability VCID-t2ne-75ck-eqcr
57
vulnerability VCID-v7tp-1t4h-zqeg
58
vulnerability VCID-v8ku-sjc8-wfga
59
vulnerability VCID-vsdf-4tfj-uybe
60
vulnerability VCID-wgsc-dnn1-ukeq
61
vulnerability VCID-wptr-hkjx-s7c3
62
vulnerability VCID-xqjr-7xfw-mbh2
63
vulnerability VCID-xt59-cnmj-2bf8
64
vulnerability VCID-y9ne-rw7e-vugf
65
vulnerability VCID-yfx4-4gsc-2kgh
66
vulnerability VCID-yrzk-1dbk-muhy
67
vulnerability VCID-z2pq-cv2w-nfdk
68
vulnerability VCID-zw2q-kna8-mqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.31-1~deb10u6
7
url pkg:deb/debian/tomcat9@9.0.43-2~deb11u10
purl pkg:deb/debian/tomcat9@9.0.43-2~deb11u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1e6p-cppr-2bh2
1
vulnerability VCID-246u-a4rh-yyd4
2
vulnerability VCID-2kku-pzer-9ufv
3
vulnerability VCID-2rmy-13ym-3bgm
4
vulnerability VCID-2x6a-3gh1-rkhs
5
vulnerability VCID-2zq1-na8s-mfdd
6
vulnerability VCID-35xg-a746-5qgc
7
vulnerability VCID-3vdn-j7sj-dfdn
8
vulnerability VCID-43j2-w5xt-43g9
9
vulnerability VCID-4cag-c4pb-dfaz
10
vulnerability VCID-5sgv-7nsz-5fa8
11
vulnerability VCID-74tx-sx8a-guhs
12
vulnerability VCID-8e1c-rbkg-v7c2
13
vulnerability VCID-8mns-kw6c-a7dk
14
vulnerability VCID-8myk-ac5b-huh8
15
vulnerability VCID-8war-4v58-eub2
16
vulnerability VCID-9kfe-1esf-uydm
17
vulnerability VCID-cfhw-vmcp-y3bc
18
vulnerability VCID-d1fm-vbd1-n7au
19
vulnerability VCID-fpgj-82wf-ykbw
20
vulnerability VCID-gb2v-96xj-ybad
21
vulnerability VCID-gvhy-d4gm-57d3
22
vulnerability VCID-gyed-x6s8-ybhr
23
vulnerability VCID-k59r-wjt3-wqe5
24
vulnerability VCID-k9cg-ehdw-dbh6
25
vulnerability VCID-kukv-k3z7-7fgs
26
vulnerability VCID-maw6-4qs5-ykae
27
vulnerability VCID-p8q2-pt96-5ye8
28
vulnerability VCID-rsxs-u5cc-rkgj
29
vulnerability VCID-sr8e-w1qk-r7fz
30
vulnerability VCID-v8ku-sjc8-wfga
31
vulnerability VCID-xqjr-7xfw-mbh2
32
vulnerability VCID-y9ne-rw7e-vugf
33
vulnerability VCID-yrzk-1dbk-muhy
34
vulnerability VCID-zw2q-kna8-mqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.43-2~deb11u10
8
url pkg:maven/org.apache.tomcat/tomcat@9.0.0.M1
purl pkg:maven/org.apache.tomcat/tomcat@9.0.0.M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18q4-zark-s7a7
1
vulnerability VCID-1e6p-cppr-2bh2
2
vulnerability VCID-1hdb-24e3-f3d6
3
vulnerability VCID-1k8f-vsg1-k3d6
4
vulnerability VCID-246u-a4rh-yyd4
5
vulnerability VCID-2kku-pzer-9ufv
6
vulnerability VCID-2sbh-sy57-3uez
7
vulnerability VCID-2x6a-3gh1-rkhs
8
vulnerability VCID-39e3-jfbg-s3hk
9
vulnerability VCID-3cr9-g81m-4ugy
10
vulnerability VCID-3n4t-bvb1-5qer
11
vulnerability VCID-3r3s-q21j-c3au
12
vulnerability VCID-43j2-w5xt-43g9
13
vulnerability VCID-46bv-6b7y-3bca
14
vulnerability VCID-4aaa-errb-2qdw
15
vulnerability VCID-4cag-c4pb-dfaz
16
vulnerability VCID-4tf3-7f5b-2ffu
17
vulnerability VCID-5sgv-7nsz-5fa8
18
vulnerability VCID-66kh-s6cr-tqf9
19
vulnerability VCID-68fk-4g86-ekbp
20
vulnerability VCID-885s-t4dx-dybv
21
vulnerability VCID-95d1-arxd-hkd1
22
vulnerability VCID-9exq-fhv6-bbea
23
vulnerability VCID-9kfe-1esf-uydm
24
vulnerability VCID-a8gk-n8bq-87cp
25
vulnerability VCID-aeeu-fpay-wufz
26
vulnerability VCID-arkn-bca7-hqam
27
vulnerability VCID-ayrd-8ntf-hkh3
28
vulnerability VCID-dzpn-w4b3-vbcm
29
vulnerability VCID-eb37-mkxf-7fgw
30
vulnerability VCID-enaj-f97c-jbh7
31
vulnerability VCID-f77q-v5xp-e7dy
32
vulnerability VCID-fpgj-82wf-ykbw
33
vulnerability VCID-fyfz-6tr5-2fc7
34
vulnerability VCID-g7bk-891a-uufy
35
vulnerability VCID-gb2v-96xj-ybad
36
vulnerability VCID-gvhy-d4gm-57d3
37
vulnerability VCID-gyed-x6s8-ybhr
38
vulnerability VCID-hmbm-5ysw-77bu
39
vulnerability VCID-hves-r5bg-yfes
40
vulnerability VCID-k59r-wjt3-wqe5
41
vulnerability VCID-k9cg-ehdw-dbh6
42
vulnerability VCID-kagr-74d9-kyhx
43
vulnerability VCID-kukv-k3z7-7fgs
44
vulnerability VCID-kwab-3s4q-eka4
45
vulnerability VCID-kyb8-rvyw-s7b1
46
vulnerability VCID-m1zd-uytj-3bej
47
vulnerability VCID-m2zn-ja8d-7kg8
48
vulnerability VCID-maw6-4qs5-ykae
49
vulnerability VCID-n3ab-nk7c-hqc9
50
vulnerability VCID-n3zn-tuck-gkfe
51
vulnerability VCID-nvbx-q971-skgm
52
vulnerability VCID-pqxe-tfhk-47b7
53
vulnerability VCID-ruuh-g3fa-m7d8
54
vulnerability VCID-sr8e-w1qk-r7fz
55
vulnerability VCID-t2ne-75ck-eqcr
56
vulnerability VCID-tfrs-d458-tfaq
57
vulnerability VCID-u3ck-cvgt-fuhd
58
vulnerability VCID-v8ku-sjc8-wfga
59
vulnerability VCID-vdnj-sqmx-e3ep
60
vulnerability VCID-vhjj-dnft-kkf4
61
vulnerability VCID-wbaq-j85q-y3c6
62
vulnerability VCID-wgsc-dnn1-ukeq
63
vulnerability VCID-xf8r-kqxb-7qdy
64
vulnerability VCID-y9ne-rw7e-vugf
65
vulnerability VCID-yfx4-4gsc-2kgh
66
vulnerability VCID-yxpq-rrry-j3h8
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.0.M1
9
url pkg:maven/org.apache.tomcat/tomcat@9.0.105
purl pkg:maven/org.apache.tomcat/tomcat@9.0.105
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-246u-a4rh-yyd4
1
vulnerability VCID-2kku-pzer-9ufv
2
vulnerability VCID-2x6a-3gh1-rkhs
3
vulnerability VCID-8war-4v58-eub2
4
vulnerability VCID-bks8-nvm9-vbgy
5
vulnerability VCID-gb2v-96xj-ybad
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.105
10
url pkg:maven/org.apache.tomcat/tomcat@10.1.0-M1
purl pkg:maven/org.apache.tomcat/tomcat@10.1.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1e6p-cppr-2bh2
1
vulnerability VCID-246u-a4rh-yyd4
2
vulnerability VCID-2kku-pzer-9ufv
3
vulnerability VCID-2rmy-13ym-3bgm
4
vulnerability VCID-2x6a-3gh1-rkhs
5
vulnerability VCID-3vdn-j7sj-dfdn
6
vulnerability VCID-43j2-w5xt-43g9
7
vulnerability VCID-4cag-c4pb-dfaz
8
vulnerability VCID-56jv-htmt-rkew
9
vulnerability VCID-5781-s1ny-q7ey
10
vulnerability VCID-5sgv-7nsz-5fa8
11
vulnerability VCID-6pm1-byhk-eqfg
12
vulnerability VCID-8mns-kw6c-a7dk
13
vulnerability VCID-8myk-ac5b-huh8
14
vulnerability VCID-b3bb-9ajg-sfc9
15
vulnerability VCID-cfhw-vmcp-y3bc
16
vulnerability VCID-d1fm-vbd1-n7au
17
vulnerability VCID-fpgj-82wf-ykbw
18
vulnerability VCID-gb2v-96xj-ybad
19
vulnerability VCID-gvhy-d4gm-57d3
20
vulnerability VCID-gyed-x6s8-ybhr
21
vulnerability VCID-j6cj-ftyd-3ffa
22
vulnerability VCID-j8tk-s915-pbfy
23
vulnerability VCID-k59r-wjt3-wqe5
24
vulnerability VCID-kukv-k3z7-7fgs
25
vulnerability VCID-maw6-4qs5-ykae
26
vulnerability VCID-n9yk-e49f-n7e7
27
vulnerability VCID-nmq2-8ysj-4fbc
28
vulnerability VCID-p6pa-f1fg-hbhg
29
vulnerability VCID-p8q2-pt96-5ye8
30
vulnerability VCID-qkx6-32cj-jfbp
31
vulnerability VCID-rzj2-4kcj-43dq
32
vulnerability VCID-sr8e-w1qk-r7fz
33
vulnerability VCID-stds-vw5z-auhp
34
vulnerability VCID-v7tp-1t4h-zqeg
35
vulnerability VCID-v8ku-sjc8-wfga
36
vulnerability VCID-vsdf-4tfj-uybe
37
vulnerability VCID-wptr-hkjx-s7c3
38
vulnerability VCID-xqjr-7xfw-mbh2
39
vulnerability VCID-y9ne-rw7e-vugf
40
vulnerability VCID-zw2q-kna8-mqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.0-M1
11
url pkg:maven/org.apache.tomcat/tomcat@10.1.41
purl pkg:maven/org.apache.tomcat/tomcat@10.1.41
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-246u-a4rh-yyd4
1
vulnerability VCID-2kku-pzer-9ufv
2
vulnerability VCID-2x6a-3gh1-rkhs
3
vulnerability VCID-8war-4v58-eub2
4
vulnerability VCID-bks8-nvm9-vbgy
5
vulnerability VCID-gb2v-96xj-ybad
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.41
12
url pkg:maven/org.apache.tomcat/tomcat@11.0.0-M1
purl pkg:maven/org.apache.tomcat/tomcat@11.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1e6p-cppr-2bh2
1
vulnerability VCID-246u-a4rh-yyd4
2
vulnerability VCID-2kku-pzer-9ufv
3
vulnerability VCID-2rmy-13ym-3bgm
4
vulnerability VCID-2x6a-3gh1-rkhs
5
vulnerability VCID-3vdn-j7sj-dfdn
6
vulnerability VCID-43j2-w5xt-43g9
7
vulnerability VCID-4cag-c4pb-dfaz
8
vulnerability VCID-5781-s1ny-q7ey
9
vulnerability VCID-5sgv-7nsz-5fa8
10
vulnerability VCID-74tx-sx8a-guhs
11
vulnerability VCID-8mns-kw6c-a7dk
12
vulnerability VCID-8myk-ac5b-huh8
13
vulnerability VCID-8war-4v58-eub2
14
vulnerability VCID-b3bb-9ajg-sfc9
15
vulnerability VCID-bks8-nvm9-vbgy
16
vulnerability VCID-cfhw-vmcp-y3bc
17
vulnerability VCID-d1fm-vbd1-n7au
18
vulnerability VCID-fpgj-82wf-ykbw
19
vulnerability VCID-gb2v-96xj-ybad
20
vulnerability VCID-gvhy-d4gm-57d3
21
vulnerability VCID-gyed-x6s8-ybhr
22
vulnerability VCID-j6cj-ftyd-3ffa
23
vulnerability VCID-k59r-wjt3-wqe5
24
vulnerability VCID-kukv-k3z7-7fgs
25
vulnerability VCID-maw6-4qs5-ykae
26
vulnerability VCID-n9yk-e49f-n7e7
27
vulnerability VCID-p6pa-f1fg-hbhg
28
vulnerability VCID-rzj2-4kcj-43dq
29
vulnerability VCID-sr8e-w1qk-r7fz
30
vulnerability VCID-v7tp-1t4h-zqeg
31
vulnerability VCID-v8ku-sjc8-wfga
32
vulnerability VCID-vsdf-4tfj-uybe
33
vulnerability VCID-xqjr-7xfw-mbh2
34
vulnerability VCID-y9ne-rw7e-vugf
35
vulnerability VCID-yrzk-1dbk-muhy
36
vulnerability VCID-zw2q-kna8-mqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.0-M1
13
url pkg:maven/org.apache.tomcat/tomcat@11.0.7
purl pkg:maven/org.apache.tomcat/tomcat@11.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-246u-a4rh-yyd4
1
vulnerability VCID-2kku-pzer-9ufv
2
vulnerability VCID-2x6a-3gh1-rkhs
3
vulnerability VCID-8war-4v58-eub2
4
vulnerability VCID-bks8-nvm9-vbgy
5
vulnerability VCID-gb2v-96xj-ybad
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.7
14
url pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M1
purl pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-246u-a4rh-yyd4
1
vulnerability VCID-2kku-pzer-9ufv
2
vulnerability VCID-3cr9-g81m-4ugy
3
vulnerability VCID-4cag-c4pb-dfaz
4
vulnerability VCID-5sgv-7nsz-5fa8
5
vulnerability VCID-8mns-kw6c-a7dk
6
vulnerability VCID-95d1-arxd-hkd1
7
vulnerability VCID-enaj-f97c-jbh7
8
vulnerability VCID-gb2v-96xj-ybad
9
vulnerability VCID-gvhy-d4gm-57d3
10
vulnerability VCID-hmbm-5ysw-77bu
11
vulnerability VCID-hves-r5bg-yfes
12
vulnerability VCID-k59r-wjt3-wqe5
13
vulnerability VCID-pqxe-tfhk-47b7
14
vulnerability VCID-sr8e-w1qk-r7fz
15
vulnerability VCID-v8ku-sjc8-wfga
16
vulnerability VCID-vdnj-sqmx-e3ep
17
vulnerability VCID-xf8r-kqxb-7qdy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M1
15
url pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.0-M1
purl pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-246u-a4rh-yyd4
1
vulnerability VCID-2kku-pzer-9ufv
2
vulnerability VCID-2rmy-13ym-3bgm
3
vulnerability VCID-43j2-w5xt-43g9
4
vulnerability VCID-4cag-c4pb-dfaz
5
vulnerability VCID-5sgv-7nsz-5fa8
6
vulnerability VCID-8mns-kw6c-a7dk
7
vulnerability VCID-b3bb-9ajg-sfc9
8
vulnerability VCID-cfhw-vmcp-y3bc
9
vulnerability VCID-d1fm-vbd1-n7au
10
vulnerability VCID-gb2v-96xj-ybad
11
vulnerability VCID-gvhy-d4gm-57d3
12
vulnerability VCID-gyed-x6s8-ybhr
13
vulnerability VCID-k59r-wjt3-wqe5
14
vulnerability VCID-maw6-4qs5-ykae
15
vulnerability VCID-sr8e-w1qk-r7fz
16
vulnerability VCID-v7tp-1t4h-zqeg
17
vulnerability VCID-v8ku-sjc8-wfga
18
vulnerability VCID-xqjr-7xfw-mbh2
19
vulnerability VCID-y9ne-rw7e-vugf
20
vulnerability VCID-zw2q-kna8-mqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.0-M1
16
url pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.0-M1
purl pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-246u-a4rh-yyd4
1
vulnerability VCID-2kku-pzer-9ufv
2
vulnerability VCID-2rmy-13ym-3bgm
3
vulnerability VCID-43j2-w5xt-43g9
4
vulnerability VCID-4cag-c4pb-dfaz
5
vulnerability VCID-5sgv-7nsz-5fa8
6
vulnerability VCID-74tx-sx8a-guhs
7
vulnerability VCID-8mns-kw6c-a7dk
8
vulnerability VCID-b3bb-9ajg-sfc9
9
vulnerability VCID-bks8-nvm9-vbgy
10
vulnerability VCID-cfhw-vmcp-y3bc
11
vulnerability VCID-d1fm-vbd1-n7au
12
vulnerability VCID-gb2v-96xj-ybad
13
vulnerability VCID-gvhy-d4gm-57d3
14
vulnerability VCID-gyed-x6s8-ybhr
15
vulnerability VCID-k59r-wjt3-wqe5
16
vulnerability VCID-maw6-4qs5-ykae
17
vulnerability VCID-sr8e-w1qk-r7fz
18
vulnerability VCID-v7tp-1t4h-zqeg
19
vulnerability VCID-v8ku-sjc8-wfga
20
vulnerability VCID-xqjr-7xfw-mbh2
21
vulnerability VCID-y9ne-rw7e-vugf
22
vulnerability VCID-yrzk-1dbk-muhy
23
vulnerability VCID-zw2q-kna8-mqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.0-M1
17
url pkg:rpm/redhat/jws6-tomcat@10.1.49-7.redhat_00006.1?arch=el8jws
purl pkg:rpm/redhat/jws6-tomcat@10.1.49-7.redhat_00006.1?arch=el8jws
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2kku-pzer-9ufv
1
vulnerability VCID-cfhw-vmcp-y3bc
2
vulnerability VCID-sr8e-w1qk-r7fz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jws6-tomcat@10.1.49-7.redhat_00006.1%3Farch=el8jws
18
url pkg:rpm/redhat/jws6-tomcat@10.1.49-7.redhat_00006.1?arch=el10jws
purl pkg:rpm/redhat/jws6-tomcat@10.1.49-7.redhat_00006.1?arch=el10jws
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2kku-pzer-9ufv
1
vulnerability VCID-cfhw-vmcp-y3bc
2
vulnerability VCID-sr8e-w1qk-r7fz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jws6-tomcat@10.1.49-7.redhat_00006.1%3Farch=el10jws
19
url pkg:rpm/redhat/jws6-tomcat@10.1.49-7.redhat_00006.1?arch=el9jws
purl pkg:rpm/redhat/jws6-tomcat@10.1.49-7.redhat_00006.1?arch=el9jws
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2kku-pzer-9ufv
1
vulnerability VCID-cfhw-vmcp-y3bc
2
vulnerability VCID-sr8e-w1qk-r7fz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jws6-tomcat@10.1.49-7.redhat_00006.1%3Farch=el9jws
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-55668.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-55668.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-55668
reference_id
reference_type
scores
0
value 0.00016
scoring_system epss
scoring_elements 0.03594
published_at 2026-04-16T12:55:00Z
1
value 0.00016
scoring_system epss
scoring_elements 0.0362
published_at 2026-04-13T12:55:00Z
2
value 0.00016
scoring_system epss
scoring_elements 0.03645
published_at 2026-04-12T12:55:00Z
3
value 0.00016
scoring_system epss
scoring_elements 0.03668
published_at 2026-04-11T12:55:00Z
4
value 0.00016
scoring_system epss
scoring_elements 0.03706
published_at 2026-04-09T12:55:00Z
5
value 0.00016
scoring_system epss
scoring_elements 0.03684
published_at 2026-04-08T12:55:00Z
6
value 0.00016
scoring_system epss
scoring_elements 0.0368
published_at 2026-04-07T12:55:00Z
7
value 0.00016
scoring_system epss
scoring_elements 0.0367
published_at 2026-04-04T12:55:00Z
8
value 0.00016
scoring_system epss
scoring_elements 0.03655
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-55668
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat
4
reference_url https://github.com/apache/tomcat/commit/8621e4c6ba2c916a41eb34cb0f781171ead33fb6
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/8621e4c6ba2c916a41eb34cb0f781171ead33fb6
5
reference_url https://github.com/apache/tomcat/commit/90306d971bb8b8393336d893644124fb2ca11d21
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/90306d971bb8b8393336d893644124fb2ca11d21
6
reference_url https://github.com/apache/tomcat/commit/9c3673ba04009377cb0c81ccb6cf5078aec1aa95
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/9c3673ba04009377cb0c81ccb6cf5078aec1aa95
7
reference_url https://lists.apache.org/thread/v6bknr96rl7l1qxkl1c03v0qdvbbqs47
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-13T13:38:12Z/
url https://lists.apache.org/thread/v6bknr96rl7l1qxkl1c03v0qdvbbqs47
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-55668
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-55668
9
reference_url https://tomcat.apache.org/security-10.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://tomcat.apache.org/security-10.html
10
reference_url https://tomcat.apache.org/security-11.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://tomcat.apache.org/security-11.html
11
reference_url https://tomcat.apache.org/security-9.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://tomcat.apache.org/security-9.html
12
reference_url http://www.openwall.com/lists/oss-security/2025/08/13/3
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2025/08/13/3
13
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1111098
reference_id 1111098
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1111098
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1111099
reference_id 1111099
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1111099
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2388226
reference_id 2388226
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2388226
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55668
reference_id CVE-2025-55668
reference_type
scores
0
value Moderate
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55668
17
reference_url https://github.com/advisories/GHSA-23hv-mwm6-g8jf
reference_id GHSA-23hv-mwm6-g8jf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-23hv-mwm6-g8jf
18
reference_url https://access.redhat.com/errata/RHSA-2026:2740
reference_id RHSA-2026:2740
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:2740
19
reference_url https://access.redhat.com/errata/RHSA-2026:2741
reference_id RHSA-2026:2741
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:2741
Weaknesses
0
cwe_id 384
name Session Fixation
description Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-2kku-pzer-9ufv