Search for packages
| purl | pkg:rpm/redhat/tomcat6@6.0.24-33?arch=el6 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-886n-1vzv-syc6
Aliases: CVE-2010-4172 GHSA-c78g-qwpw-2jgv |
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications. | There are no reported fixed by versions. |
|
VCID-dhun-hj5q-dfch
Aliases: CVE-2011-0013 GHSA-3p86-xgrq-m6p6 |
Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag. | There are no reported fixed by versions. |
|
VCID-tfn5-6ckq-wyce
Aliases: CVE-2010-3718 GHSA-fj6c-prgj-gr3r |
Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attack. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:56:54.423374+00:00 | RedHat Importer | Affected by | VCID-886n-1vzv-syc6 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4172.json | 38.0.0 |
| 2026-04-01T14:56:50.059122+00:00 | RedHat Importer | Affected by | VCID-dhun-hj5q-dfch | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0013.json | 38.0.0 |
| 2026-04-01T14:56:47.442389+00:00 | RedHat Importer | Affected by | VCID-tfn5-6ckq-wyce | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3718.json | 38.0.0 |