Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@6.0.36
purl pkg:maven/org.apache.tomcat/tomcat@6.0.36
Tags Ghost
Next non-vulnerable version 9.0.117
Latest non-vulnerable version 11.0.21
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-p4dn-y54m-8fd1
Aliases:
CVE-2012-3544
GHSA-qfxv-3ppc-7qg5
Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.
6.0.37
Affected by 5 other vulnerabilities.
7.0.30
Affected by 0 other vulnerabilities.
VCID-ryha-ndms-afbn
Aliases:
CVE-2013-2067
GHSA-6m48-jxwx-76q7
java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.
6.0.37
Affected by 5 other vulnerabilities.
7.0.33
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-04T14:31:13.368755+00:00 GHSA Importer Fixing VCID-12du-1vyt-bkgx https://github.com/advisories/GHSA-28cq-6rmx-pjq4 38.1.0
2026-04-04T14:31:10.348665+00:00 GHSA Importer Fixing VCID-fpuc-fe6m-47c6 https://github.com/advisories/GHSA-jgm2-m5cg-f66g 38.1.0
2026-04-04T14:31:10.166157+00:00 GHSA Importer Fixing VCID-ta1m-dh8x-nubc https://github.com/advisories/GHSA-76vr-72mv-mf3q 38.1.0
2026-04-04T14:31:10.012018+00:00 GHSA Importer Fixing VCID-r5rc-rdd9-bfbk https://github.com/advisories/GHSA-99rf-92v6-cwx4 38.1.0
2026-04-03T21:26:06.049600+00:00 GitLab Importer Fixing VCID-12du-1vyt-bkgx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2012-5887.yml 38.1.0
2026-04-03T21:26:05.297889+00:00 GitLab Importer Fixing VCID-r5rc-rdd9-bfbk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2012-5885.yml 38.1.0
2026-04-03T21:26:04.422953+00:00 GitLab Importer Fixing VCID-g7eg-s99s-xqe7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2012-5886.yml 38.1.0
2026-04-03T21:25:52.772581+00:00 GitLab Importer Fixing VCID-fpuc-fe6m-47c6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2012-3546.yml 38.1.0
2026-04-01T13:10:59.654723+00:00 GithubOSV Importer Fixing VCID-fpuc-fe6m-47c6 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-jgm2-m5cg-f66g/GHSA-jgm2-m5cg-f66g.json 38.0.0
2026-04-01T13:10:25.243991+00:00 GithubOSV Importer Fixing VCID-ta1m-dh8x-nubc https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-76vr-72mv-mf3q/GHSA-76vr-72mv-mf3q.json 38.0.0
2026-04-01T13:09:35.668111+00:00 GithubOSV Importer Fixing VCID-12du-1vyt-bkgx https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-28cq-6rmx-pjq4/GHSA-28cq-6rmx-pjq4.json 38.0.0
2026-04-01T13:08:40.506191+00:00 GithubOSV Importer Fixing VCID-r5rc-rdd9-bfbk https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-99rf-92v6-cwx4/GHSA-99rf-92v6-cwx4.json 38.0.0
2026-04-01T12:50:45.166044+00:00 GitLab Importer Fixing VCID-ta1m-dh8x-nubc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2012-4431.yml 38.0.0
2026-04-01T12:38:16.913515+00:00 Apache Tomcat Importer Fixing VCID-mwk8-b5c9-kbb9 https://tomcat.apache.org/security-6.html 38.0.0
2026-04-01T12:38:16.886781+00:00 Apache Tomcat Importer Fixing VCID-ta1m-dh8x-nubc https://tomcat.apache.org/security-6.html 38.0.0
2026-04-01T12:38:16.858105+00:00 Apache Tomcat Importer Fixing VCID-fpuc-fe6m-47c6 https://tomcat.apache.org/security-6.html 38.0.0
2026-04-01T12:38:16.830628+00:00 Apache Tomcat Importer Fixing VCID-n76n-ywja-rbhh https://tomcat.apache.org/security-6.html 38.0.0
2026-04-01T12:38:16.802103+00:00 Apache Tomcat Importer Fixing VCID-vd1s-m27a-8ucc https://tomcat.apache.org/security-6.html 38.0.0
2026-04-01T12:38:16.769528+00:00 Apache Tomcat Importer Affected by VCID-p4dn-y54m-8fd1 https://tomcat.apache.org/security-6.html 38.0.0
2026-04-01T12:38:16.740778+00:00 Apache Tomcat Importer Affected by VCID-ryha-ndms-afbn https://tomcat.apache.org/security-6.html 38.0.0