Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/tomcat@7.0.22
purl pkg:apache/tomcat@7.0.22
Next non-vulnerable version 7.0.30
Latest non-vulnerable version 11.0.21
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-hhk9-cr54-8fgc
Aliases:
CVE-2012-0022
GHSA-8h2q-qm9x-55jc
Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.
7.0.23
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-hxj6-mupf-abbc Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by reading TCP data. CVE-2011-3375
GHSA-rp8h-vr48-4j8p
VCID-j2j9-avuw-n3eq org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the Manager application, which allows local users to gain privileges by using an untrusted web application to access the Manager application's functionality. CVE-2011-3376

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:38:15.449794+00:00 Apache Tomcat Importer Fixing VCID-j2j9-avuw-n3eq https://tomcat.apache.org/security-7.html 38.0.0
2026-04-01T12:38:15.417474+00:00 Apache Tomcat Importer Fixing VCID-hxj6-mupf-abbc https://tomcat.apache.org/security-7.html 38.0.0
2026-04-01T12:38:15.375056+00:00 Apache Tomcat Importer Affected by VCID-hhk9-cr54-8fgc https://tomcat.apache.org/security-7.html 38.0.0