Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/tomcat@5.5.17
purl pkg:apache/tomcat@5.5.17
Next non-vulnerable version 5.5.18
Latest non-vulnerable version 11.0.21
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-skar-qk57-qkdv
Aliases:
CVE-2006-7195
GHSA-p57v-p3fx-qgwm
Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.
5.5.18
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-86ur-vudp-4yc2 The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts. CVE-2007-1858

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:38:19.312078+00:00 Apache Tomcat Importer Fixing VCID-86ur-vudp-4yc2 https://tomcat.apache.org/security-5.html 38.0.0
2026-04-01T12:38:19.274426+00:00 Apache Tomcat Importer Affected by VCID-skar-qk57-qkdv https://tomcat.apache.org/security-5.html 38.0.0