Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@3.3a |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-6ss8-442a-3baf
Aliases: CVE-2003-0044 GHSA-5hgm-qm5m-5vmw |
Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML. |
Affected by 4 other vulnerabilities. |
|
VCID-6yk2-f8d5-cyc3
Aliases: CVE-2003-0043 GHSA-cvx5-7vc7-rg77 |
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file. |
Affected by 1 other vulnerability. |
|
VCID-9rpn-zb26-yfdk
Aliases: CVE-2003-0045 GHSA-w97x-xfxf-f9xj |
Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp. |
Affected by 2 other vulnerabilities. Affected by 1 other vulnerability. |
|
VCID-shq7-jxup-5fgk
Aliases: CVE-2003-0042 GHSA-qfw2-wvrw-mvw4 |
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character. |
Affected by 1 other vulnerability. |
|
VCID-x6zh-jypa-pbcc
Aliases: CVE-2005-0808 |
Apache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash) via a crafted AJP12 packet to TCP port 8007. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T16:00:26.628552+00:00 | GHSA Importer | Fixing | VCID-2fb2-r763-ybg5 | https://github.com/advisories/GHSA-8g4f-fh7f-4fwh | 38.0.0 |
| 2026-04-01T13:05:05.916400+00:00 | GithubOSV Importer | Fixing | VCID-2fb2-r763-ybg5 | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/04/GHSA-8g4f-fh7f-4fwh/GHSA-8g4f-fh7f-4fwh.json | 38.0.0 |
| 2026-04-01T12:49:55.314307+00:00 | GitLab Importer | Fixing | VCID-2fb2-r763-ybg5 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2002-2006.yml | 38.0.0 |
| 2026-04-01T12:38:21.151236+00:00 | Apache Tomcat Importer | Fixing | VCID-edmc-muvz-5ufu | https://tomcat.apache.org/security-3.html | 38.0.0 |
| 2026-04-01T12:38:21.115732+00:00 | Apache Tomcat Importer | Fixing | VCID-2fb2-r763-ybg5 | https://tomcat.apache.org/security-3.html | 38.0.0 |
| 2026-04-01T12:38:21.080745+00:00 | Apache Tomcat Importer | Fixing | VCID-rybd-nsf5-j7fr | https://tomcat.apache.org/security-3.html | 38.0.0 |
| 2026-04-01T12:38:21.048093+00:00 | Apache Tomcat Importer | Affected by | VCID-9rpn-zb26-yfdk | https://tomcat.apache.org/security-3.html | 38.0.0 |
| 2026-04-01T12:38:20.999576+00:00 | Apache Tomcat Importer | Affected by | VCID-shq7-jxup-5fgk | https://tomcat.apache.org/security-3.html | 38.0.0 |
| 2026-04-01T12:38:20.949636+00:00 | Apache Tomcat Importer | Affected by | VCID-6yk2-f8d5-cyc3 | https://tomcat.apache.org/security-3.html | 38.0.0 |
| 2026-04-01T12:38:20.896621+00:00 | Apache Tomcat Importer | Affected by | VCID-6ss8-442a-3baf | https://tomcat.apache.org/security-3.html | 38.0.0 |
| 2026-04-01T12:38:20.783011+00:00 | Apache Tomcat Importer | Affected by | VCID-x6zh-jypa-pbcc | https://tomcat.apache.org/security-3.html | 38.0.0 |