Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@9.0.0.M2
purl pkg:maven/org.apache.tomcat/tomcat@9.0.0.M2
Tags Ghost
Next non-vulnerable version 9.0.117
Latest non-vulnerable version 11.0.21
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-9exq-fhv6-bbea
Aliases:
CVE-2016-0763
GHSA-9hjv-9h75-xmpp
The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass intended SecurityManager restrictions and read or write to arbitrary application data, or cause a denial of service (application disruption), via a web application that sets a crafted global context.
9.0.0.M3
Affected by 18 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T21:50:41.549970+00:00 GitLab Importer Fixing VCID-68fk-4g86-ekbp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2015-5345.yml 38.4.0
2026-04-11T23:06:48.282018+00:00 GitLab Importer Fixing VCID-68fk-4g86-ekbp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2015-5345.yml 38.3.0
2026-04-04T14:30:53.720772+00:00 GHSA Importer Fixing VCID-kyb8-rvyw-s7b1 https://github.com/advisories/GHSA-jrcp-c39h-r29x 38.1.0
2026-04-04T14:30:53.646248+00:00 GHSA Importer Fixing VCID-vhjj-dnft-kkf4 https://github.com/advisories/GHSA-w7cg-5969-678w 38.1.0
2026-04-04T14:30:29.925098+00:00 GHSA Importer Affected by VCID-9exq-fhv6-bbea https://github.com/advisories/GHSA-9hjv-9h75-xmpp 38.1.0
2026-04-04T14:30:20.959403+00:00 GHSA Importer Fixing VCID-tfrs-d458-tfaq https://github.com/advisories/GHSA-mv42-px54-87jw 38.1.0
2026-04-04T14:30:20.355340+00:00 GHSA Importer Fixing VCID-1k8f-vsg1-k3d6 https://github.com/advisories/GHSA-6vx3-hr43-cfrh 38.1.0
2026-04-04T14:30:18.762944+00:00 GHSA Importer Fixing VCID-68fk-4g86-ekbp https://github.com/advisories/GHSA-rh8q-vjgf-gf74 38.1.0
2026-04-02T23:15:00.171780+00:00 GitLab Importer Fixing VCID-68fk-4g86-ekbp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2015-5345.yml 38.1.0
2026-04-01T13:11:06.737761+00:00 GithubOSV Importer Fixing VCID-vhjj-dnft-kkf4 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-w7cg-5969-678w/GHSA-w7cg-5969-678w.json 38.0.0
2026-04-01T13:09:44.772293+00:00 GithubOSV Importer Fixing VCID-kyb8-rvyw-s7b1 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-jrcp-c39h-r29x/GHSA-jrcp-c39h-r29x.json 38.0.0
2026-04-01T13:09:41.477900+00:00 GithubOSV Importer Fixing VCID-tfrs-d458-tfaq https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-mv42-px54-87jw/GHSA-mv42-px54-87jw.json 38.0.0
2026-04-01T13:09:20.208766+00:00 GithubOSV Importer Fixing VCID-1k8f-vsg1-k3d6 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-6vx3-hr43-cfrh/GHSA-6vx3-hr43-cfrh.json 38.0.0
2026-04-01T13:08:48.524385+00:00 GithubOSV Importer Fixing VCID-68fk-4g86-ekbp https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-rh8q-vjgf-gf74/GHSA-rh8q-vjgf-gf74.json 38.0.0
2026-04-01T12:50:38.767301+00:00 GitLab Importer Fixing VCID-tfrs-d458-tfaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2016-0714.yml 38.0.0
2026-04-01T12:50:34.475883+00:00 GitLab Importer Fixing VCID-1k8f-vsg1-k3d6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2016-0706.yml 38.0.0
2026-04-01T12:50:33.661711+00:00 GitLab Importer Affected by VCID-9exq-fhv6-bbea https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2016-0763.yml 38.0.0
2026-04-01T12:50:30.474251+00:00 GitLab Importer Fixing VCID-68fk-4g86-ekbp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2015-5345.yml 38.0.0
2026-04-01T12:50:30.138972+00:00 GitLab Importer Fixing VCID-vhjj-dnft-kkf4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2015-5351.yml 38.0.0
2026-04-01T12:50:26.515315+00:00 GitLab Importer Fixing VCID-kyb8-rvyw-s7b1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2015-5346.yml 38.0.0
2026-04-01T12:38:09.766695+00:00 Apache Tomcat Importer Affected by VCID-9exq-fhv6-bbea https://tomcat.apache.org/security-9.html 38.0.0