Search for packages
Package details: pkg:apache/tomcat@8.5.7
purl pkg:apache/tomcat@8.5.7
Next non-vulnerable version 8.5.13
Latest non-vulnerable version 11.0.10
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-ekhp-s7kg-ebdy
Aliases:
CVE-2024-21733
GHSA-f4qf-m5gf-8jm8
Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43. Users are recommended to upgrade to version 8.5.64 onwards or 9.0.44 onwards, which contain a fix for the issue.
8.5.64
Affected by 1 other vulnerability.
9.0.44
Affected by 1 other vulnerability.
VCID-u1n8-g1e6-y7e9
Aliases:
CVE-2016-8747
GHSA-fjwp-r6fm-q6qw
8.5.11
Affected by 1 other vulnerability.
9.0.0+M17
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-31T08:03:23.299762+00:00 Apache Tomcat Importer Affected by VCID-u1n8-g1e6-y7e9 https://tomcat.apache.org/security-8.html 37.0.0
2025-07-31T08:03:21.852824+00:00 Apache Tomcat Importer Affected by VCID-ekhp-s7kg-ebdy https://tomcat.apache.org/security-8.html 37.0.0