Search for packages
| purl | pkg:apache/tomcat@6.0.29 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-886n-1vzv-syc6
Aliases: CVE-2010-4172 GHSA-c78g-qwpw-2jgv |
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications. |
Affected by 4 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
VCID-dhun-hj5q-dfch
Aliases: CVE-2011-0013 GHSA-3p86-xgrq-m6p6 |
Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag. |
Affected by 4 other vulnerabilities. Affected by 1 other vulnerability. |
|
VCID-tfn5-6ckq-wyce
Aliases: CVE-2010-3718 GHSA-fj6c-prgj-gr3r |
Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attack. |
Affected by 4 other vulnerabilities. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T12:38:17.223711+00:00 | Apache Tomcat Importer | Affected by | VCID-tfn5-6ckq-wyce | https://tomcat.apache.org/security-6.html | 38.0.0 |
| 2026-04-01T12:38:17.195500+00:00 | Apache Tomcat Importer | Affected by | VCID-886n-1vzv-syc6 | https://tomcat.apache.org/security-6.html | 38.0.0 |
| 2026-04-01T12:38:17.163682+00:00 | Apache Tomcat Importer | Affected by | VCID-dhun-hj5q-dfch | https://tomcat.apache.org/security-6.html | 38.0.0 |